CVE-2024-32810 – WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability

https://notcve.org/view.php?id=CVE-2024-32810

22 Apr 2024 — Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2. Vulnerabilidad de autorización faltante en ShortPixel ShortPixel Critical CSS. Este problema afecta a ShortPixel Critical CSS: desde n/a hasta 1.0.2. The ShortPixel Critical CSS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several function sin versions up to, and including, 1.0.2. This makes it possible for aut... • https://patchstack.com/database/vulnerability/shortpixel-critical-css/wordpress-shortpixel-critical-css-plugin-1-0-2-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •