Missing Authorization Vulnerability in ShortPixel Image Optimizer Could Lead to Security Risks

CVE-2024-48044

Summary

The vulnerability presents a missing authorization flaw in the ShortPixel Image Optimizer plugin, particularly affecting versions up to 5.6.3. This issue arises from incorrectly configured access control security levels, enabling unauthorized users to exploit the application. As a result, sensitive actions or data may be accessible to individuals without the necessary privileges, posing significant security risks for web applications that rely on this optimization tool.

References