Aryadhiratara vulnerabilities
Published CVEs affecting Aryadhiratara products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-67624
Medium · 6.5
CWE-862 Feb 20, 2026
WordPress Optimize More! – Images plugin <= 1.1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimize More! – Images: from n/a through <= 1.1.3.
CVE-2025-9945
Medium · 4.3
CWE-352 Oct 3, 2025
Optimize More! – CSS <= 1.0.3 - Cross-Site Request Forgery to Plugin Settings Reset
The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the reset_plugin function. This makes it possible for unauthenticated attackers to reset the plugin's optimization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.