PHP EUVD-2026-16087

While the CVSS v3.1 score of 5.4 indicates moderate severity, the real-world risk is constrained by multiple attack complexity factors. The vulnerability requires PR:L (low privilege - Author level access), AC:L (low attack complexity), and critically, UI:R (requires user interaction from a higher-privileged administrator). The attack vector is AV:N (network-based), and the impact is C:L/I:L/A:N (low confidentiality and integrity impact, no availability impact). The scope is changed (S:C), meaning the vulnerability can affect resources beyond the vulnerable component. From an exploitation perspective, this is not a critical issue despite the moderate CVSS score because: (1) the attacker must already have Author-level access to WordPress, (2) the victim must manually trigger the exploit by opening a specific UI element, (3) the impact is limited to script execution in an administrator's browser session without ability to modify core system data or availability. EPSS scores and KEV status data are not provided in the intelligence sources, but the availability of public repository references and detailed code paths (lines 139, 435, 449) suggests security researchers have already documented the attack vector publicly. No formal POC code availability is noted in the sources, but the vulnerability is sufficiently documented for skilled developers to craft exploits. This is most dangerous in scenarios with untrusted authors or compromised author accounts, and in WordPress installations where administrators regularly interact with user-uploaded content.

A malicious Author user, or an attacker who has compromised an Author account, uploads an image to a WordPress site and sets the attachment title to a crafted payload such as 'image" onload="fetch('/admin-backdoor?token=stolen')" data-x="'. When a site administrator later opens the ShortPixel AI editor popup to apply Background Removal or Image Upscale to this attachment, the malicious JavaScript payload executes in the administrator's browser with the administrator's permissions, potentially exfiltrating sensitive data, modifying site content, creating new admin accounts, or performing other actions the administrator account can perform. The attack requires the administrator to manually interact with the specific attachment, but this is a normal administrative workflow for sites actively using ShortPixel's AI features, making it a plausible real-world scenario in production environments.