WordPress security by component
ImageRecycle pdf & image compression
Plugin description
ImageRecycle pdf & image compression is a WordPress component with 15 published CVE records in this archive. The latest tracked vulnerability was published Dec 13, 2024; the highest CVE/CNA score is 7.1.
Plugin slug:
imagerecycle-pdf-image-compressionLatest vulnerability
CVE-2024-54266: ImageRecycle pdf & image compression: Cross-site scripting
ImageRecycle pdf & image compression is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
Known source slugs: imagerecycle-pdf-&-image-compression, imagerecycle-pdf-image-compression
| Safe version |
|
||
|---|---|---|---|
| Dec 13, 2024 |
CVE-2024-54266
ImageRecycle pdf & image compression: Cross-site scripting
ImageRecycle pdf & image compression is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|
| Aug 24, 2024 |
CVE-2024-8120
ImageRecycle pdf & image compression: Cross-site request forgery
ImageRecycle pdf & image compression is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.7
NVD4.3
|
| Aug 24, 2024 |
CVE-2024-6631
ImageRecycle pdf & image compression: A security weakness
ImageRecycle pdf & image compression is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.0
NVD4.3
|
| Feb 29, 2024 |
CVE-2024-1339
ImageRecycle pdf & image compression: Cross-site request forgery
ImageRecycle pdf & image compression is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1338
ImageRecycle pdf & image compression: Cross-site request forgery
ImageRecycle pdf & image compression is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1336
ImageRecycle pdf & image compression: Cross-site request forgery
ImageRecycle pdf & image compression is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1335
ImageRecycle pdf & image compression: Cross-site request forgery
ImageRecycle pdf & image compression is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1334
ImageRecycle pdf & image compression: Cross-site request forgery
ImageRecycle pdf & image compression is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1091
ImageRecycle pdf & image compression: A security weakness
ImageRecycle pdf & image compression is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1090
ImageRecycle pdf & image compression: A security weakness
ImageRecycle pdf & image compression is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-1089
ImageRecycle pdf & image compression: A security weakness
ImageRecycle pdf & image compression is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-0984
ImageRecycle pdf & image compression: A security weakness
ImageRecycle pdf & image compression is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 29, 2024 |
CVE-2024-0983
ImageRecycle pdf & image compression: A security weakness
ImageRecycle pdf & image compression is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Sep 04, 2023 |
CVE-2023-40196
Imagerecycle Pdf Image Compression: Cross-site scripting
Imagerecycle Pdf Image Compression is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|
| Sep 04, 2023 |
CVE-2023-30494
Imagerecycle Pdf Image Compression: Cross-site scripting
Imagerecycle Pdf Image Compression is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|