Kraken

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-0619 Feb 01, 20:15 MEDIUM This Month

The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Kraken Io Image Optimizer Wordpress Plugin Kraken

NVD VulDB

CVSS 3.1

6.5

EPSS

0.1%

CVE-2022-38454 Sep 23, 19:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Kraken Io Image Optimizer Wordpress Plugin Kraken

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-0619

EPSS 0% CVSS 6.5

MEDIUM This Month

WordPress Authentication Bypass Kraken Io Image Optimizer +2

NVD VulDB

CVE-2022-38454

EPSS 0% CVSS 8.8

HIGH This Week

WordPress CSRF Kraken Io Image Optimizer +2

NVD