| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-4636 | Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload | optimole | Optimole – Optimize Images in Real Time | Medium | 6.4 | 2024-05-15 06:51:56 | Deep Dive |
| CVE-2024-27950 | WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability | Sirv CDN and Image Hosting | Sirv | Medium | 5.4 | 2024-03-01 07:46:25 | Deep Dive |
| CVE-2024-27949 | WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability | Sirv CDN and Image Hosting | Sirv | Medium | 5.4 | 2024-03-01 07:30:27 | Deep Dive |
| CVE-2023-32512 | WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF) | ShortPixel | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 中危 | - | 2023-11-09 21:21:46 | Deep Dive |
| CVE-2023-37889 | WordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF) | WPAdmin | WPAdmin AWS CDN | Medium | 4.3 | 2023-07-18 12:25:06 | Deep Dive |
| CVE-2022-4119 | Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS | Unknown | Image Optimizer, Resizer and CDN | 中危 | - | 2023-01-02 21:49:21 | Deep Dive |
| CVE-2021-24888 | ImageBoss < 3.0.6 - Admin+ Stored Cross-Site Scripting | Unknown | ImageBoss – Images Up To 60% Smaller & CDN | 中危 | - | 2021-11-23 19:16:20 | Deep Dive |
| CVE-2021-32616 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in 1CDN | onedotprojects | cdn | High | 8.1 | 2021-05-28 20:20:17 | Deep Dive |