{"error":0,"message":null,"data":{"name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN","plugin":"wp-smushit","link":"https:\/\/wordpress.org\/plugins\/wp-smushit\/","latest":"1789561800","closed":0,"closed_reason":null,"closed_date":null,"vulnerability":[{"uuid":"599fc24e61db7d07c642c3fabb9ff36fc35110962f5fe053e90cb413625e97e4","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 2.7.6","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.7.6","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2017-15079","name":"CVE-2017-15079","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2017-15079","description":"[en] The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.","date":"2017-10-06"},{"id":"7cd7fc67dbd080537fdbc52b6831ab2ce3eb97bb","name":"Smush \u2013 Lazy Load Images, Optimize & Compress Images <= 2.7.5 - Directory Traversal","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-lazy-load-images-optimize-compress-images-275-directory-traversal","description":"The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.","date":"2017-09-21"},{"id":"ad29f678-56cd-49b7-9d2e-7a0c4de930a8","name":"Smush Image Compression and Optimization &lt;= 2.7.5 - File Transversal","link":"https:\/\/wpscan.com\/vulnerability\/ad29f678-56cd-49b7-9d2e-7a0c4de930a8","description":"The Smush &ndash; Lazy Load Images, Optimize &amp; Compress Images WordPress plugin was affected by a File Transversal security vulnerability.","date":null}],"impact":{"cvss":{"version":"3.0","vector":"CVSS:3.0\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N","av":"n","ac":"l","pr":"n","ui":"n","s":"u","c":"h","i":"n","a":"n","score":"7.5","severity":"h","exploitable":"3.9","impact":"3.6"},"cvss3":{"version":"3.0","vector":"CVSS:3.0\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N","score":"7.5","severity":"high","av":"network","ac":"low","pr":"none","ui":"none","s":"unchanged","c":"high","i":"none","a":"none","exploitable":"3.9","impact":"3.6"},"cwe":[{"cwe":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory."}]}},{"uuid":"41e9fbf9b7abf8debbfc14b898c3b62be6880ebfefed361a8f4a867c9fa34be4","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.9.9","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.9.9","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2022-1009","name":"CVE-2022-1009","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2022-1009","description":"[en] The Smush WordPress plugin before 3.9.9 does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious configuration file","date":"2022-05-30"},{"id":"83c39cf94ec504e1c79236c921142132dedf3527","name":"WordPress Smush plugin <= 3.9.8 - Reflected Cross-Site Scripting (XSS) vulnerability","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/wp-smushit\/vulnerability\/wordpress-smush-plugin-3-9-8-reflected-cross-site-scripting-xss-vulnerability","description":"Reflected Cross-Site Scripting (XSS) vulnerability discovered by Taurus Omar in WordPress Smush plugin (versions <= 3.9.8).","date":"2022-05-03"},{"id":"43093ecb00f2c946f325c63730deaca5fbed6db0","name":"Smush \u2013 Lazy Load Images, Optimize & Compress Images <= 3.9.8 - Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-lazy-load-images-optimize-compress-images-398-cross-site-scripting","description":"The Smush \u2013 Lazy Load Images, Optimize & Compress Images plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'name' and 'description' parameters in versions up to, and including, 3.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This requires an attacker to trick an administrator into uploading a malicious configuration file in order to be successful.","date":"2022-05-03"},{"id":"bb5af08f-bb19-46a1-a7ac-8381f428c11e","name":"Smush &lt; 3.9.9 - Admin+ Reflected Cross-Site Scripting","link":"https:\/\/wpscan.com\/vulnerability\/bb5af08f-bb19-46a1-a7ac-8381f428c11e","description":"The plugin does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious configuration file","date":null}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"n","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"6.1","severity":"m","exploitable":"2.8","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"6.1","severity":"medium","av":"network","ac":"low","pr":"none","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.8","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}]}},{"uuid":"d6e7f1d075d7cdb0c69e5f6cb96f2b3275c01e9456e5c187835dfa271b763152","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.0.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.0.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"652cee930b4c5b4daf628ea8a9f3a802f0d99948","name":"WordPress Smush Image Compression and Optimization plugin <= 2.9.1 - Authenticated XSS & Phar Deserialization vulnerabilities","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/wp-smushit\/vulnerability\/wordpress-smush-image-compression-and-optimization-plugin-2-9-1-authenticated-xss-phar-deserialization-vulnerabilities","description":"Authenticated XSS & Phar Deserialization vulnerabilities found by RIPS Technologies in WordPress Smush Image Compression and Optimization plugin (versions <= 2.9.1).","date":"2018-12-10"}],"impact":[]},{"uuid":"8fd8201890e2fa376ce307d2df97351cce854e7be262a832bd0c1ecaac01f176","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 2.7.6","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.7.6","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"41497e5826baf6a6bcedeca63643f2b334dba238","name":"WordPress Smush Image Compression and Optimization plugin <=2.7.5 - File Traversal vulnerability","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/wp-smushit\/vulnerability\/wordpress-smush-image-compression-and-optimization-plugin-2-7-5-file-traversal-vulnerability","description":"File Traversal vulnerability found by Ricardo S\u00e1nchez in WordPress Smush Image Compression and Optimization plugin (versions <=2.7.5).","date":"2017-10-09"}],"impact":[]},{"uuid":"76b8f9ea1d0c894a70f553fb29432715504e2408c6e862129e468e0b6d60a33e","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.0.1","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.0.1","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"1b7b9063d6297ef0cf4d01b221d4e4da2c885eb9","name":"Smush \u2013 Lazy Load Images, Optimize & Compress Images <= 3.0.0 - Authenticated PHAR Deserialization","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-lazy-load-images-optimize-compress-images-300-authenticated-phar-deserialization","description":"The Smush \u2013 Lazy Load Images, Optimize & Compress Images plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 3.0.0. This makes it possible for authenticated attackers to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.","date":"2018-12-10"}],"impact":[]},{"uuid":"d3526063fee49fe7ff711bd68f4822f03b67e867effef5b1344f0e8dff29316a","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.0.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.0.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"a23c3a99b0a842dcbe6bec87be8b60c8ba8bf4da","name":"Smush \u2013 Lazy Load Images, Optimize & Compress Images <= 2.9.1 - Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-lazy-load-images-optimize-compress-images-291-cross-site-scripting","description":"The Smush \u2013 Lazy Load Images, Optimize & Compress Images plugin for WordPress is vulnerable to Cross-Site Scripting leading  in versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject malicious web scripts into the application.","date":"2018-12-10"}],"impact":[]},{"uuid":"9e026a7556aacf58736395dba4bc039d94a2a9df829c8dc0c09f1f78f39d9a43","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.9.9","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.9.9","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"b5bf5f41-aad3-45be-9cab-ab846b94003a","name":"Smush Image Compression and Optimization &lt;= 2.9.1 - Authenticated Phar Deserialization","link":"https:\/\/wpscan.com\/vulnerability\/b5bf5f41-aad3-45be-9cab-ab846b94003a","description":"The Smush &ndash; Lazy Load Images, Optimize &amp; Compress Images WordPress plugin was affected by an Authenticated Phar Deserialization security vulnerability.","date":null}],"impact":[]},{"uuid":"02362d7d76a5f05fe038ccea4509234755a5251b2fe08861de5e410ab4725b73","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.16.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.16.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2023-3352","name":"CVE-2023-3352","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-3352","description":"[en] The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_resmush_list() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to delete the resmush list for Nextgen or the Media Library.","date":"2024-06-21"},{"id":"c620781d93cbce8168087bc822f43ac8c936de9c","name":"Smush \u2013 Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-lazy-load-images-optimize-compress-images-3164-missing-authorization-to-resmush-list-deletion","description":"The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_resmush_list() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to delete the resmush list for Nextgen or the Media Library.","date":"2024-06-20"},{"id":"1e36a14de3c44fd703ecaf071f2d7b54307cd8f0","name":"WordPress Smush Image Compression and Optimization Plugin <= 3.16.4 is vulnerable to Broken Access Control","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/wp-smushit\/vulnerability\/wordpress-smush-plugin-3-16-4-authenticated-resmush-list-deletion-vulnerability","description":"<p>WordPress Smush Image Compression and Optimization Plugin <= 3.16.4 is vulnerable to Broken Access Control<\/p><p>Software: Smush Image Compression and Optimization<\/p><p>Link: https:\/\/wordpress.org\/plugins\/wp-smushit\/#developers<\/p><p>Affected Version <= 3.16.4<\/p><p>Fixed in version 3.16.5 <\/p>","date":"2024-06-20"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"u","c":"n","i":"l","a":"n","score":"4.3","severity":"m","exploitable":"2.8","impact":"1.4"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:L\/A:N","score":"4.3","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"unchanged","c":"none","i":"low","a":"none","exploitable":"2.8","impact":"1.4"},"cwe":[{"cwe":"CWE-862","name":"Missing Authorization","description":"The product does not perform an authorization check when an actor attempts to access a resource or perform an action."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"49680faededd7b60156c7dd13236466edbce1771d8f90c423adc1abe194ade01","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 3.17.1","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.17.1","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2025-22288","name":"CVE-2025-22288","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-22288","description":"[en] Path Traversal: '...\/...\/\/' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n\/a through <= 3.17.0.","date":"2025-11-06"},{"id":"44b9676e329e5ecf4cff811e751b34984c232438","name":"WordPress Smush Image Compression and Optimization Plugin <= 3.17.0 is vulnerable to Directory Traversal","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/wp-smushit\/vulnerability\/wordpress-smush-image-compression-and-optimization-plugin-3-17-0-directory-traversal-vulnerability","description":"<p>WordPress Smush Image Compression and Optimization Plugin <= 3.17.0 is vulnerable to Directory Traversal<\/p><p>Software: Smush Image Compression and Optimization<\/p><p>Fixed in version 3.17.1 <\/p><p>Affected Version <= 3.17.0<\/p><p>CVE: CVE-2025-22288<\/p>","date":"2025-03-29"},{"id":"e24e0dc769cd9b1e15ef0370ecb990a520c4984b","name":"Smush Image Compression and Optimization <= 3.17.0 - Authenticated (Admin+) Directory Traversal","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-image-compression-and-optimization-3170-authenticated-admin-directory-traversal","description":"The Smush Image Optimization \u2013 Optimize Images | Compress & Lazy Load Images | Convert WebP & AVIF | Image CDN plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.17.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to perform actions on files outside of the originally intended directory.","date":"2025-03-29"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:N\/A:N","av":"n","ac":"l","pr":"h","ui":"n","s":"c","c":"l","i":"n","a":"n","score":"4.1","severity":"m","exploitable":"2.3","impact":"1.4"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:N\/A:N","score":"4.1","severity":"medium","av":"network","ac":"low","pr":"high","ui":"none","s":"changed","c":"low","i":"none","a":"none","exploitable":"2.3","impact":"1.4"},"cwe":[{"cwe":"CWE-35","name":"Path Traversal: '...\/...\/\/'","description":"The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '...\/...\/\/' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"45dd4259f338f01efd01c42d6655a482b39e65719fc7f0c151b883ca76e02e59","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 4.3.2","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"4.3.2","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-19223","name":"CVE-2026-19223","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-19223","description":"[en] The Smush  WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.","date":"2026-08-27"},{"id":"342ca55815f08f5fe34a10d99c93519ef844c6ca","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP & CDN < 4.3.2 - Authenticated (Administrator+) Remote Code Execution","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-image-optimization-compression-lazy-load-webp-cdn-432-authenticated-administrator-remote-code-execution","description":"The Smush \u2013 Image Optimization, Compression, Lazy Load, WebP & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to 4.3.2. This is due to insufficient validation of user supplied input before it is executed. This makes it possible for authenticated attackers, with administrator-level access and above, to execute arbitrary code on the server.","date":"2026-08-27"}],"impact":{"cwe":[{"cwe":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","kev":false,"kev_date":null}}},{"uuid":"da9948ff912afee40632f98c1477efef71e2a0457d895f0b7e9ff7a86b1a1cbf","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP &amp; CDN [wp-smushit] < 4.3.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"4.3.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-81285","name":"CVE-2026-81285","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-81285","description":"[en] Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions.","date":"2026-08-28"},{"id":"82ff9869f7a72bce44824f2f55330d9e1797c189","name":"Smush \u2013 Image Optimization, Compression, Lazy Load, WebP & CDN <= 4.2.0 - Unauthenticated Denial of Service","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/wp-smushit\/smush-image-optimization-compression-lazy-load-webp-cdn-420-unauthenticated-denial-of-service","description":"The Smush \u2013 Image Optimization, Compression, Lazy Load, WebP & CDN plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 4.2.0. This is due to insufficient validation of user supplied input. This makes it possible for unauthenticated attackers to make the affected site unavailable.","date":"2026-08-27"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H","av":"n","ac":"l","pr":"n","ui":"n","s":"u","c":"n","i":"n","a":"h","score":"7.5","severity":"h","exploitable":"0.0","impact":"0.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H","score":"7.5","severity":"high","av":"network","ac":"low","pr":"none","ui":"none","s":"unchanged","c":"none","i":"none","a":"high","exploitable":"0.0","impact":"0.0"},"cwe":[{"cwe":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated."}]}}]},"updated":"1788420701"}