Advisories · Technology
Smush.
Every CVE that names Smush among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.7 Low
Smush < 4.3.6 - Author+ Optimization and Restoration of Others' Attachments via IDOR
- Smush
- Broken access control
- CVSS 2.7 Low
Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite
- Smush
- Broken access control
- CVSS 7.2 High
Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
- Smush
- Code injection