CVE-2025-15693

Name of the Vulnerable Software and Affected Versions JCH Optimize WordPress plugin versions 4.2.1 through 5.0.0

Description An issue exists in the administrative image-browsing feature where a directory path is not properly restricted to the site boundaries. This allows authenticated users with high privileges, such as single-site administrators and multisite sub-site administrators, to perform path traversal. Path traversal is a technique used to access files and directories that are stored outside the intended web root folder by manipulating file paths.

Recommendations Update JCH Optimize WordPress plugin to version 5.0.1 or later.