Calgary, Alberta, Canada
sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total12
Critical0
High0
Medium12
Reset
Showing 1-12 of 12 records
Threat Entry Updated 2024-09-12

CVE-2024-6631 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform unauthorized actions, such as updating plugin settings.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-6631

MEDIUM CVSS 5.0 2024-08-24
Open Full Technical Breakdown
Threat Entry Updated 2024-09-17

CVE-2024-8120 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14. This is due to missing or incorrect nonce validation on several functions in the class/class-image-otimizer.php file. This makes it possible for unauthenticated attackers to update plugin settings along with performing other actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-8120

MEDIUM CVSS 4.7 2024-08-24
Open Full Technical Breakdown
Threat Entry Updated 2024-12-31

CVE-2024-1339 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the reinitialize function. This makes it possible for unauthenticated attackers to remove all plugin data via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1339

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-31

CVE-2024-1338 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the stopOptimizeAll function. This makes it possible for unauthenticated attackers to modify image optimization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1338

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-31

CVE-2024-1336 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the optimizeAllOn function. This makes it possible for unauthenticated attackers to modify image optimization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1336

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-31

CVE-2024-1335 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the disableOptimization function. This makes it possible for unauthenticated attackers to disable the image optimization setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1335

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-31

CVE-2024-1334 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the enableOptimization function. This makes it possible for unauthenticated attackers to enable image optimization via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1334

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-27

CVE-2024-1091 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to remove all plugin data.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1091

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-27

CVE-2024-1090 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify image optimization settings.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1090

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-27

CVE-2024-1089 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify image optimization settings.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-1089

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-27

CVE-2024-0984 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to disable the image optimization setting.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-0984

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Threat Entry Updated 2024-12-27

CVE-2024-0983 - Imagerecycle Pdf Image Compression Plugin

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to enable image optimization.

PLUGIN Imagerecycle Pdf Image Compression

CVE-2024-0983

MEDIUM CVSS 4.3 2024-02-29
Open Full Technical Breakdown
Scroll to top