Description
WordPress Plugin EWWW Image Optimizer is prone to a Denial of Service vulnerability. Exploiting this issue may allow an attacker to prevent the browsing session for a user, thus denying service to legitimate users. WordPress Plugin EWWW Image Optimizer version 6.0.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 6.0.2 or latest
References
https://gist.github.com/mmmdzz/03df5177afd04b32ac190eb7907f3834
https://plugins.svn.wordpress.org/ewww-image-optimizer/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin NewStatPress Multiple Vulnerabilities (0.9.8)
WordPress Plugin Booking Calendar Contact Form Multiple Vulnerabilities (1.0.2)
WordPress Plugin PWAMP PHP Object Injection (1.0.0)
WordPress Plugin Table Maker Multiple Vulnerabilities (1.7)
WordPress Plugin Traffic Analyzer Cross-Site Scripting (3.3.2)