{"id":18755896,"date":"2025-12-15T02:47:43","date_gmt":"2025-12-15T02:47:43","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&#038;p=18755896"},"modified":"2025-12-15T03:47:58","modified_gmt":"2025-12-15T03:47:58","slug":"missing-authorization-2","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/missing-authorization-2\/","title":{"rendered":"Missing Authorization"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.<\/p>\n","protected":false},"template":"","class_list":["post-18755896","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18755896","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":2,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18755896\/revisions"}],"predecessor-version":[{"id":18755898,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18755896\/revisions\/18755898"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=18755896"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}