https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T11:45:54.470638+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-15693 fkie_cve-2025-15693 2026-09-29T11:45:54.472754+00:00

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate directories and file names outside the web root.

 https://vulnerability.circl.lu/vuln/ghsa-pqwr-mv7c-mq9q GHSA-pqwr-mv7c-mq9q 2026-09-29T11:45:54.472863+00:00

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate directories and file names outside the web root.