CVE-2022-29417

Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.

Score

CVSS 3.1 4.3 Medium

Status

Modified - audit@patchstack.com

Published

2022-04-25

Last modified

2026-04-28

Weaknesses

CWE-284

Affected products

• Shortpixel Adaptive Images (Shortpixel)
• Shortpixel Adaptive Images Wordpress Plugin (Shortpixel)

References

• https://patchstack.com/database/vulnerability/shortpixel-adaptive-images/wordpress-shortpixel-adaptive-images-plugin-3-…
• https://wordpress.org/plugins/shortpixel-adaptive-images/#developers