PT-2025-42673
CVE-2025-11378
·
Published
2025-10-17
·
Updated
2025-10-18
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress versions through 6.3.4
Description
The plugin has a flaw that allows unauthorized modification of data. A missing capability check on the
shortpixel ajaxRequest AJAX action permits authenticated attackers with Contributor-level access or higher to export and import site options.Recommendations
Update to a version beyond 6.3.4.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾