| Package | Affected versions | Patched versions |
|---|---|---|
| image optimizer | < 1.0.27 | 1.0.27 |
The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the get_subdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free