CVE-2023-30200: Advancedplugins Ultimateimagetool

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack.

Affected products

• Advancedplugins Ultimateimagetool: before 2.1.03 (fixed in 2.1.03)

Published 2023-07-20. Last modified 2026-06-17.