CVE-2016-20010

CVE-2016-20010

EPSS 3.7%

EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/