中
4.3
The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to...
CVE-2025-11455
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 修正版 |
|---|---|---|---|
| tigroumeow | Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF |
7.2.0 以前 |
— |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API in all versions up to, and including, 7.2.0 This makes it possible for authenticated attackers, with Author-level access and above, to replace files that do not belong to them.
出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
参照URL
- web wordfence.com
- web plugins.trac.wordpress.org
- web nvd.nist.gov
- web github.com