Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Smush Image Compression and Optimization Directory Traversal - CVE-2017-15079 - Vulnerability Database
WP Plugin Wp Smushit

WordPress Plugin Smush Image Compression and Optimization Directory Traversal - CVE-2017-15079

Medium
Reference: CVE-2017-15079
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-15079
Title: WordPress Plugin Smush Image Compression and Optimization Directory Traversal
Overview:

WordPress Plugin Smush Image Compression and Optimization is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Smush Image Compression and Optimization version 2.7.5 is vulnerable prior versions may also be affected.