CVE-2024-32106
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-32106 represents a Cross-Site Request Forgery (CSRF) vulnerability in WP Compress - Image Optimizer [All-In-One]. Affecting versions from n/a through 6.10.35, this issue allows unauthorized users to perform malicious actions on behalf of a user who is currently logged in to the WordPress admin panel. By tricking the user into clicking a specially crafted link, an attacker can potentially modify image optimization settings, install plugins, or even delete data. This vulnerability highlights the importance of keeping WordPress installations updated to mitigate risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.