Advisories · Technology
nosilver4u EWWW Image Optimizer.
Every CVE that names nosilver4u EWWW Image Optimizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key
- nosilver4u EWWW Image Optimizer
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content
- nosilver4u EWWW Image Optimizer
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- nosilver4u EWWW Image Optimizer
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass
- nosilver4u EWWW Image Optimizer
- Cross-site request forgery (CSRF)