CVE-2022-38454

概要

参考情報

• patchstack.com/database/vulnerability/kraken-image-optimizer/wordpress-kraken-io-image-optimizer-plugin-2-6-5-cross-site-request-forgery-csrf-vulnerability/_s_id=cve · Broken Link
• wordpress.org/plugins/kraken-image-optimizer · Product

kraken.io image optimizer のその他の脆弱性

• CVE-2023-0619中 6.5The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actio…