CVE-2024-31924

The EWWW Image Optimizer WordPress plugin prior to version 7.3.0 contains a cross-site request forgery vulnerability that could enable an attacker to trick authenticated users into performing unintended actions without their knowledge. Discovered by Dhabaleshwar Das, this flaw affects users with higher privilege levels who could be manipulated into executing malicious requests. The vulnerability has been resolved in version 7.3.0 and later, making an update essential for protection.

Based on public CVE data (MITRE/NVD).