CVE-2022-29417: WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability
Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID for the Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin?
The vulnerability ID is CVE-2022-29417.
What is the affected software for the Plugin Settings Update vulnerability?
The affected software is ShortPixel's ShortPixel Adaptive Images plugin version <= 3.3.1 at WordPress.
What is the severity of the Plugin Settings Update vulnerability?
The severity of the vulnerability is medium with a CVSS score of 4.3.
How can an attacker exploit the Plugin Settings Update vulnerability?
An attacker with a low user role like a subscriber or higher can exploit the vulnerability to change the plugin settings.
Are there any patches or fixes available for the Plugin Settings Update vulnerability?
Yes, patches and fixes are available. You can find them at the following references: [Patchstack](https://patchstack.com/database/vulnerability/shortpixel-adaptive-images/wordpress-shortpixel-adaptive-images-plugin-3-3-1-subscriber-plugin-settings-update-vulnerability) and [WordPress Plugin Directory](https://wordpress.org/plugins/shortpixel-adaptive-images/#developers).