PT-2025-45187 · Wpmu Dev Your All In One Wordpress Platform+1 · Smush Image Compression/Optimization+1
CVE-2025-22288
·
Published
2025-03-29
·
Updated
2025-11-06
CVSS v3.1
4.1
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Smush Image Compression and Optimization versions prior to 3.17.1
Description
A directory traversal issue exists that allows authenticated attackers with Administrator-level access and above to perform actions on files outside of the intended directory. This is achieved through a path traversal vulnerability using the sequence
.../...//.Recommendations
Update Smush Image Compression and Optimization to version 3.17.1 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Smush Image Compression/Optimization
Wp-Smushit