Image Optimizer – Compress Images and Convert to WebP or AVIF vulnerabilities
1 known vulnerability in Image Optimizer – Compress Images and Convert to WebP or AVIF from Elemntor. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
Image Optimizer – Compress Images and Convert…: External Control of File Name or Path
The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the Image_Backup::remove() function where backup file paths stored in post meta are used dir