CVE-2024-0984

Summary

CVE-2024-0984 is a vulnerability affecting the ImageRecycle plugin for WordPress. This issue stems from a missing capability check in the disableOptimization function, which exists in all versions up to and including 3.1.13. As a result, authenticated attackers with subscriber-level access or higher can exploit this flaw to unauthorizedly modify the image optimization setting. This poses a risk to websites using this plugin, as unintended optimization disabling could impact performance or security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.