{
 "id": "WPSEC-2026-1773",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1773/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1773/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1773/index.md",
 "title": "Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more <= 4.6.4 - Authenticated (Subscriber+) Missing Authorization to Image Preset Creation, Modification, and Deletion",
 "description": "The Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin for WordPress is vulnerable to unauthorized modification of data via the image preset AJAX actions (ilab_dynamic_images_new_preset, ilab_dynamic_images_save_preset and ilab_dynamic_images_delete_preset) in all versions up to, and including, 4.6.4, due to a missing capability check and missing nonce verification in the newPreset(), savePreset() and deletePreset() functions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create, overwrite or delete the site's Dynamic Images (Imgix) image-editing presets, including the default presets applied to image sizes across the site, when the Dynamic Images feature is enabled.",
 "plugin": {
  "slug": "ilab-media-tools",
  "name": "Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more",
  "full_name": "Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more",
  "wordpress_org": "https://wordpress.org/plugins/ilab-media-tools/",
  "advisories_url": "https://wpsec.com/vuln/plugin/ilab-media-tools/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/ilab-media-tools"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.7.2",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.7.2"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.7.2",
 "remediation": "Update to 4.7.2 or later.",
 "fix_released": "2026-10-26T17:18:23+00:00",
 "published": "2026-10-27T17:47:54+00:00",
 "updated": "2026-10-27T13:05:11.902615+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1773/",
  "https://plugins.svn.wordpress.org/ilab-media-tools/tags/4.7.2/",
  "https://wordpress.org/plugins/ilab-media-tools/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/ilab-media-tools",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-27"
 }
}