Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 03 Nov 2026 11:28:45 +0000 CVE-2025-11455 — Perfect Images <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacement https://db.gcve.eu/vuln/cve-2025-11455 <p><strong>Affected:</strong> tigroumeow Perfect Images: Regenerate Thumbnails, Image Sizes, WebP &amp; AVIF</p> <p>The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API in all versions up to, and including, 7.2.0 This makes it possible for authenticated attackers, with Author-level access and above, to replace files that do not belong to them.</p> <p><strong>Affected:</strong> tigroumeow Perfect Images: Regenerate Thumbnails, Image Sizes, WebP &amp; AVIF</p> <p>The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API in all versions up to, and including, 7.2.0 This makes it possible for authenticated attackers, with Author-level access and above, to replace files that do not belong to them.</p> https://db.gcve.eu/vuln/cve-2025-11455