TinyPNG – JPEG, PNG & WebP image compression vulnerabilities
1 known vulnerability in TinyPNG – JPEG, PNG & WebP image compression from TinyPNG. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
TinyPNG – JPEG, PNG & WebP image compression: Improper Limitation of a Pathname to a Restricted Directory
The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_converted_image_size function in all versions up to, and including, 3.6.13. This makes it poss