cve/2024/CVE-2024-0984.md
2025-09-29 21:09:30 +02:00

894 B

CVE-2024-0984

Description

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to disable the image optimization setting.

POC

Reference

No PoCs from references.

Github