CVE-2025-15693: JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal
The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate directories and file names outside the web root.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JCH Optimize WordPress pluginto a version that resolves this vulnerability.Fixed in 5.0.1
Event History
Frequently Asked Questions
Who can exploit this issue in single-site and multisite WordPress deployments?
On a single-site installation, exploitation requires an administrator. On a multisite installation, a sub-site administrator can exploit it; the issue does not require network-level administrator access according to the available information.
What information can an attacker obtain through this vulnerability?
An authorized high-privilege attacker can enumerate directory names and file names outside the web root. The available information describes enumeration only and does not establish file-content disclosure, modification, or code execution.
Are versions 5.0.1 and later affected?
The issue affects versions before 5.0.1, including the stated 4.2.1 through 5.0.0 range. Version 5.0.1 is not identified as affected.