Jch Optimize
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:jch_optimize:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Jch Optimize (1846db72-5d6a-5604-8e60-72e42500b5f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-84934 |
vulnerable | 2026-09-16 04:33:10.327754 |
JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override
The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX actions and lets the request choose which internal action runs, allowing any authenticated users such as Subscribers to import arbitrary JCH Optimize WordPress plugin before 6.0.1 settings and store a script that executes in the browser of any visitor or administrator viewing the site.
Published: 2026-09-05T06:00:10.114Z
Updated: 2026-09-06T10:24:42.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15693 |
vulnerable | 2026-09-16 04:27:18.262015 |
JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal
The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate directories and file names outside the web root.
Published: 2026-09-05T06:00:03.671Z
Updated: 2026-09-06T10:19:06.475Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.