Not rated
CVE-2022-2091 The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make…
Description
The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make any logged user upload images via a CSRF attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cache Images 3.2 | earliest → < 3.2.1 | 3.2.1 |