Hype Hype pico Vulnerability

Hype Hype pico is a WordPress plugin used for image processing and optimization. It allows users to upload and process images on their website. This vulnerability in the plugin's access control security levels enables attackers to exploit incorrectly configured security settings, potentially leading to unauthorized access to sensitive data.

You're affected if you use Missing Authorization vulnerability. Affected versions: 1.0.5 If you don't recognise this software, you're probably not affected.

1. Contact DynamiApps directly for a patched version - there's no public patch link in the advisory.
2. Immediate mitigations:
   • Restrict network access to your WordPress instance (firewall it from the public internet)
   • Audit plugin and theme activity for suspicious access patterns
   • Monitor for unauthorized plugin activation

• vdp.patchstack.com