Image Compression and Optimization Plugin Vulnerability in Crush.pics for WordPress

CVE-2025-14482

What is CVE-2025-14482?

The Crush.pics Image Optimizer plugin for WordPress is vulnerable due to inadequate capability checks on several functions across all versions up to 1.8.7. This flaw allows authenticated users, such as those with Subscriber-level access or higher, to manipulate critical plugin settings. Attackers can disable essential features like auto-compression and modify image quality settings, potentially leading to a degradation of image handling performance and security risks within WordPress environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References