PatchTheCVEresmush.it vulnerabilities
Recent CVEs affecting resmush.it products. 3 tracked.
resmush.it has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-11-14. Highest priority: CVE-2022-2449 (score 35/100).
- CVE-2022-2450 MEDIUM 4.3 UPGRADE The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authoriza
- CVE-2022-2449 MEDIUM 6.5 UPGRADE The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perfor
- CVE-2022-2448 MEDIUM 4.8 UPGRADE The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could al
FAQ
How do I fix resmush.it vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is resmush.it being exploited right now?
None of the tracked resmush.it CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which resmush.it CVE should I patch first?
CVE-2022-2449 currently ranks highest (35/100): The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perfor.