Filtered by vendor Wpmudev Subscriptions
Filtered by product Smush Image Compression And Optimization Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-22288 2 Wordpress, Wpmudev 2 Wordpress, Smush Image Compression And Optimization 2025-11-07 4.1 Medium
Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.
CVE-2017-15079 1 Wpmudev 1 Smush Image Compression And Optimization 2025-04-20 N/A
The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.
CVE-2022-1009 1 Wpmudev 1 Smush Image Compression And Optimization 2024-11-21 6.1 Medium
The Smush WordPress plugin before 3.9.9 does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious configuration file