Kraken Kraken.io Image Optimizer — known CVE vulnerabilities

Every CVE whose affected-product data names Kraken Kraken.io Image Optimizer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-0619 — CVSS 6.5 (medium): The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX…
• CVE-2022-38454 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.