Remote Code Execution Vulnerability in Cloudflare Image Resizing Plugin for WordPress

CVE-2025-8723

What is CVE-2025-8723?

The Cloudflare Image Resizing plugin for WordPress is susceptible to a serious security flaw due to the lack of proper authentication and inadequate data sanitization within its hook_rest_pre_dispatch() method. This vulnerability permits unauthenticated attackers to inject arbitrary PHP code into the plugin's codebase. Consequently, this can lead to remote code execution, posing significant risks to websites that utilize this plugin. This issue affects all versions of the plugin up to, and including, version 1.5.6.

References