Medium · 4.3 CVE-2024-31924 EUVD-2024-29782GHSA-27p7-7mgq-m3v8

WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: nosilver4u Product: EWWW Image Optimizer

Description

Cross-Site Request Forgery (CSRF) vulnerability in nosilver4u EWWW Image Optimizer ewww-image-optimizer.This issue affects EWWW Image Optimizer: from n/a through <= 7.2.3.

Affected products

Vendor	Product	Affected	Fixed
nosilver4u	EWWW Image Optimizer	≤ 7.2.3	—

References

https://patchstack.com/database/Wordpress/Plugin/ewww-image-optimizer/vulnerability/wordpress-ewww-image-optimizer-plugin-7-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry