CVE-2025-62736

MediumCVSS 4.3

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

11th percentile - higher than 11% of all known CVEs

Summary

The Image Cleanup plugin up to version 1.9.2 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Risk Assessment

Unauthorized users may gain access to administrative functions or data, potentially leading to security breaches.

Recommendation

Update the plugin to the latest version and review access control configurations.

Other vulnerabilities in Image Cleanup

CVE-2025-62737Medium
A vulnerability in the Image Cleanup plugin (opicron) allows exposure of sensitive system information to unauthorized parties. The issue affects versions up to and including 1.9.2.

Original NVD description (English source)

Missing Authorization vulnerability in opicron Image Cleanup image-cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Cleanup: from n/a through <= 1.9.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS