CVE-2022-2091: Cache Images Project Cache Images

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make any logged user upload images via a CSRF attack.

Affected products

• Cache Images Project Cache Images: before 3.2.1 (fixed in 3.2.1)

Published 2022-07-11. Last modified 2026-06-17.