Threat Entry Updated 2024-11-21

CVE-2023-0619 - Kraken Image Optimizer Plugin

The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations.

PLUGIN Kraken Image Optimizer

CVE-2023-0619

MEDIUM CVSS 6.5 2023-02-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-38454 - Kraken Image Optimizer Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin

PLUGIN Kraken Image Optimizer

CVE-2022-38454

MEDIUM CVSS 5.4 2022-09-23

Risk Score

Open Full Technical Breakdown