MEDIUM
WordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerability
Published Dec 13, 2024
5.4
MEDIUMCVSS 3.1
EPSS 0.57%
Description
Missing Authorization vulnerability in Iulia Cazan Image Regenerate & Select Crop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Regenerate & Select Crop: from n/a through 7.1.0.
Affected products
-
- Version 0StatusaffectedConstraints<=7.1.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Iulia Cazan | Image Regenerate & Select Crop | unaffected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update the WordPress Image Regenerate & Select Crop plugin to the latest available version (at least 7.2.0).
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Dec 13, 2024
Updated Apr 28, 2026
Reserved Jun 26, 2023
Link CVE-2023-36680
CISA Vulnrichment
Updated Dec 13, 2024
ENISA EUVD
EUVD-2023-40623 Assigner Patchstack
Published Dec 13, 2024
Updated Apr 28, 2026
Exploited since n/a
Link EUVD-2023-40623