Path Traversal Vulnerability in WPMU DEV Smush Image Compression and Optimization

CVE-2025-22288

What is CVE-2025-22288?

The Path Traversal vulnerability in WPMU DEV's Smush Image Compression and Optimization plugin allows an attacker to manipulate file paths, potentially leading to unauthorized access to sensitive files on the server. This issue affects versions from n/a to 3.17.0 and poses a significant risk to WordPress sites using the plugin, as it could be exploited to read files that should be inaccessible. Web administrators should ensure they are using a patched version to mitigate this risk.

References