Optimole vulnerabilities

Products

• Optimole 5
• – Optimize Images In Real Time 5
• – Optimize Images | Convert Webp & Avif | Cdn & Lazy Load | Image Optimization 2
• Super Page Cache 2

Newest

• optimole Optimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget CVE-2026-96530 6.5 MediumOctober 7, 2026
• optimole WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability CVE-2026-102375 6.5 MediumSeptember 30, 2026
• optimole Optimole 4.0.0 - 4.2.12 - Author+ Stored XSS via Video Player Block CVE-2026-96531 6.8 MediumSeptember 26, 2026
• optimole Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter CVE-2026-84829 8.8 HighSeptember 16, 2026
• optimole – optimize images | convert webp & avif | cdn & lazy load | image optimization Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter CVE-2026-77365 7.2 HighAugust 28, 2026
• optimole WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-57673 7.1 HighJuly 2, 2026
• optimole – optimize images | convert webp & avif | cdn & lazy load | image optimization Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action CVE-2026-11784 Public exploit 4.3 MediumJune 18, 2026
• optimole – optimize images in real time Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter CVE-2026-5217 7.2 HighApril 11, 2026
• optimole – optimize images in real time Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL CVE-2026-5226 6.1 MediumApril 11, 2026
• optimole super page cache Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log CVE-2026-1843 7.2 HighFebruary 14, 2026
• optimole – optimize images in real time Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload CVE-2025-11519 4.3 MediumOctober 18, 2025
• optimole – optimize images in real time Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload CVE-2024-4636 6.4 MediumMay 15, 2024
• optimole super page cache for cloudflare, super page cache +1 more WordPress Super Page Cache for Cloudflare plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability CVE-2024-27968 7.1 HighMarch 21, 2024
• optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 more ThemeIsle SDK <= Various Versions - Missing Authorization CVE-2024-1047 5.3 MediumFebruary 2, 2024