plugin
6 known security issues reported for the Kraken Image Optimizer WordPress plugin. Most recent disclosed Dec 9, 2024.
Running Kraken Image Optimizer on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kraken.io Image Optimizer: from n/a through 2.6.7.
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.9. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations.
[en] The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations.
TheKraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its kraken_media_library_reset_all AJAX action in versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset i...
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.6.5. This is due to missing nonce validation on the kraken_settings_page() function. This makes it possible for unauthenticated attackers to modify the plugin's settings, via forged request...
[en] Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free