Skip to contentExactly Www Ewww Image Optimizer vulnerabilities
- exactly www ewww image optimizerEWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load AttributeCVE-2026-910496.4 Medium
- exactly www ewww image optimizerEWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter KeyCVE-2026-928266.1 Medium
- exactly www ewww image optimizerWordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-970676.5 Medium
- exactly www ewww image optimizerEWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration HandlerCVE-2026-910724.4 Medium
- exactly www ewww image optimizerEWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post MetaCVE-2026-910516.6 Medium
- exactly www ewww image optimizerEWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference ExpansionCVE-2026-910116.8 Medium
- exactly www ewww image optimizerWordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-847737.2 High
- exactly www ewww image optimizerEWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post ContentCVE-2026-154466.4 Medium
- exactly www ewww image optimizerWordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-319244.3 Medium
- ewww image optimizer, exactly www ewww image optimizer +1 moreWordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data ExposureCVE-2023-40600Public exploit5.3 Medium
- ewww image optimizer, exactly www ewww image optimizer +1 moreEWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery BypassCVE-2020-367504.3 Medium