CVE-2022-2450

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-245008.8Windows SMB Remote Code Execution VulnerabilityCVE-2022-245017.8VP9 Video Extensions Remote Code Execution VulnerabilityCVE-2022-245024.3Windows HTML Platforms Security Feature Bypass VulnerabilityCVE-2022-245035.4Remote Desktop Protocol Client Information Disclosure VulnerabilityCVE-2022-245048.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-245057.0Windows ALPC Elevation of Privilege VulnerabilityCVE-2022-245066.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-245077.8Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2022-245088.8Win32 File Enumeration Remote Code Execution VulnerabilityCVE-2022-245097.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2022-245107.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2022-245115.5Microsoft Office Word Tampering Vulnerability
CVE-2022-2450: Medium severity, CVSS 4.3 | Vulnix