CVE-2023-0619

MEDIO 6.5CVE-2023-0619 · Published 01/02/2023 · updated 17/06/2026

In breve

CVE-2023-0619 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda kraken.io image optimizer (kraken).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.68%, superiore al 52.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
kraken.io image optimizer kraken	`≤ 2.6.8`	No fix yet

Description

The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations.

References

plugins.trac.wordpress.org/browser/kraken-image-optimizer/tags/2.6.6/kraken.php · Third Party Advisory
wordfence.com/threat-intel/vulnerabilities/id/f94eabc5-6e3b-46df-9e36-d7d0fad833de
wordfence.com/threat-intel/vulnerabilities/id/f94eabc5-6e3b-46df-9e36-d7d0fad833de · Third Party Advisory

Altre vulnerabilità di kraken.io image optimizer

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free