Description
WordPress Plugin EWWW Image Optimizer is prone to a Denial of Service vulnerability. Exploiting this issue may allow an attacker to prevent the browsing session for a user, thus denying service to legitimate users. WordPress Plugin EWWW Image Optimizer version 6.0.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 6.0.2 or latest
References
https://gist.github.com/mmmdzz/03df5177afd04b32ac190eb7907f3834
https://plugins.svn.wordpress.org/ewww-image-optimizer/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Advanced Access Manager Multiple Vulnerabilities (6.6.1)
WordPress Plugin Mapwiz SQL Injection (1.0.1)
WordPress Plugin WpGenius Job Listing Cross-Site Scripting (1.0.2)
WebLogic CVE-2008-2578 Vulnerability (CVE-2008-2578)
WordPress Plugin Easy Affiliate Links Cross-Site Scripting (3.7.0)