CVE-2024-1336

Summary

CVE-2024-1336 is a Cross-Site Request Forgery vulnerability affecting the ImageRecycle pdf & image compression plugin for WordPress. Versions up to and including 3.1.13 are vulnerable due to missing or incorrect nonce validation on the optimizeAllOn function. This issue allows unauthenticated attackers to manipulate image optimization settings through forged requests, which can be executed by tricking a site administrator into performing a specific action, such as clicking on a malicious link. This vulnerability poses a significant security risk and should be addressed promptly by updating the plugin to a patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.