Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2023-22708
Disclosure Date: December 09, 2024 (last updated December 21, 2024)
Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kraken.io Image Optimizer: from n/a through 2.6.7.
0
Attacker Value
Unknown
CVE-2023-0619
Disclosure Date: February 01, 2023 (last updated October 08, 2023)
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations.
0
Attacker Value
Unknown
CVE-2022-47747
Disclosure Date: January 20, 2023 (last updated October 08, 2023)
kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs.
0
Attacker Value
Unknown
CVE-2022-38454
Disclosure Date: September 23, 2022 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.
0
Attacker Value
Unknown
CVE-2022-1561
Disclosure Date: July 29, 2022 (last updated October 08, 2023)
Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, but the consumed backend might be vulnerable.
0
