CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
What the vulnerability does
Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.
Explanation of Vulnerability in Simple Terms
The Smush Image Compression and Optimization plugin for WordPress contains an information disclosure vulnerability affecting versions up to 3.17.0. An authenticated administrator with high privileges can access sensitive data through the plugin's functionality. The vulnerability has limited scope but may expose confidential information to site administrators. Update to a version newer than 3.17.0 to remediate.
What an attacker can do
Read sensitive information accessible through the plugin when logged in as a high-privilege administrator.
Potential impact on your site
Administrators may inadvertently expose confidential data through normal plugin use; update required to prevent information leakage.
Conditions required to exploit
Attacker must be authenticated as a WordPress administrator or user with high privileges.
Key dates
External resources
