Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:50:23 +0000 CVE-2024-1090 — ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll https://cve.radiocsirt.org/vuln/cve-2024-1090 <p><strong>Affected:</strong> ImageRecycle pdf &amp; image compression</p> <p>The ImageRecycle pdf &amp; image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify image optimization settings.</p> <p><strong>Affected:</strong> ImageRecycle pdf &amp; image compression</p> <p>The ImageRecycle pdf &amp; image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify image optimization settings.</p> https://cve.radiocsirt.org/vuln/cve-2024-1090