CVE-2022-2450: Resmush.it Image Optimizer

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.

Affected products

• Resmush.it Resmush.it Image Optimizer: before 0.4.4 (fixed in 0.4.4)

Published 2022-11-14. Last modified 2026-06-17.