WordPress Plugin Vulnerabilities

EWWW Image Optimizer 2.0.1 - Cross-Site Scripting (XSS)

Description

The EWWW Image Optimizer WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
ewww-image-optimizer
Fixed in 2.0.2

References

CVE
CVE-2014-6243
URL
https://seclists.org/bugtraq/2014/Oct/45
URL
https://www.immuniweb.com/advisory/HTB23234

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
17401705-5f44-47d6-920e-ec058d426114

Timeline

Publicly Published
2014-10-09 (about 11 years ago)
Added
2014-10-09 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-04-23
Title
AI Contact Us Form <= 1.0 - Admin+ Stored XSS
Published
2024-07-09
Title
Web Directory Free < 1.7.2 - Reflected XSS
Published
2022-12-20
Title
Metricool < 1.18 - Admin+ Stored XSS
Published
2014-08-01
Title
copy-in-clipboard <= 0.8 - XSS in ZeroClipboard
Published
2016-09-07
Title
WordPress 2.5-4.6 - Authenticated Stored Cross-Site Scripting via Image Filename