title: reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls
description: The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: reSmush.it : the only free Image Optimizer & compress plugin
versions:
version: 0.4.4, status: affected, lessThan: 0.4.4, versionType: custom
}