Skip to content

Shortpixel vulnerabilities

Products

Newest

shortpixel enable media replace Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload CVE-2026-114431 6.4 MediumNovember 4, 2026
shortpixel enable media replace WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability CVE-2026-73186 8.8 HighOctober 30, 2026
shortpixel enable media replace Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer CVE-2026-114422 7.5 HighOctober 30, 2026
shortpixel enable media replace Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow CVE-2026-85655 4.3 MediumOctober 28, 2026
shortpixel image optimizer WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-103070 6.5 MediumOctober 8, 2026
shortpixel image optimizer WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability CVE-2026-97246 4.9 MediumSeptember 30, 2026
shortpixel image optimizer – optimize images, convert webp & avif ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content CVE-2026-17086 8.8 HighSeptember 18, 2026
shortpixel adaptive images – webp, avif, cdn, image optimization ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter CVE-2026-15345 4.3 MediumAugust 16, 2026
shortpixel adaptive images WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-57342 6.5 MediumJuly 2, 2026
shortpixel enable media replace WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-57722 5.9 MediumJuly 1, 2026
shortpixel adaptive images WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability CVE-2026-56066 5.8 MediumJune 26, 2026
shortpixel image optimizer WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability CVE-2026-39471 7.2 HighJune 15, 2026
shortpixel enable media replace Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter CVE-2026-5714 6.4 MediumJune 9, 2026
shortpixel image optimizer – optimize images, convert webp & avif ShortPixel Image Optimizer <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title CVE-2026-4335 5.4 MediumMarch 26, 2026
shortpixel enable media replace Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace CVE-2026-2732 5.4 MediumMarch 4, 2026
shortpixel image optimizer – optimize images, convert webp & avif ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter CVE-2026-1246 4.9 MediumFebruary 5, 2026
shortpixel image optimizer – optimize images, convert webp & avif ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export CVE-2025-11378 5.4 MediumOctober 18, 2025
shortpixel enable media replace Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode CVE-2025-9496 6.4 MediumOctober 11, 2025
shortpixel adaptive images – webp, avif, cdn, image optimization ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL CVE-2025-6626 4.4 MediumAugust 2, 2025
shortpixel enable media replace WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31081 7.1 HighApril 1, 2025
shortpixel adaptive images WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability CVE-2025-30853 5.4 MediumApril 1, 2025
shortpixel image optimizer WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability CVE-2024-48044 5.4 MediumNovember 1, 2024
shortpixel image optimizer WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability CVE-2024-48043 7.6 HighOctober 17, 2024
kubiq wp svg images WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG CVE-2024-5945 6.4 MediumJune 21, 2024
shortpixel adaptive images WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-35172 4.4 MediumMay 13, 2024
shortpixel adaptive images WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-4689 4.3 MediumMay 10, 2024
shortpixel critical css WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability CVE-2024-32810 7.6 HighMay 3, 2024
shortpixel adaptive images WordPress ShortPixel Adaptive Images plugin <= 3.8.2 - Broken Access Control vulnerability CVE-2024-31230 5.3 MediumApril 10, 2024
shortpixel enable media replace Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting CVE-2023-6737 4.7 MediumJanuary 11, 2024
shortpixel adaptive images – webp, avif, cdn, image optimization, adaptive images +1 more WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-32512 4.3 MediumNovember 9, 2023
shortpixel enable media replace Enable Media Replace < 4.1.3 - Author+ PHP Object Injection CVE-2023-4643 8.8 HighOctober 16, 2023
shortpixel adaptive images, unknown shortpixel adaptive images +1 more ShortPixel Adaptive Images < 3.6.3 - Reflected XSS CVE-2023-0334 6.1 MediumFebruary 27, 2023
shortpixel enable media replace Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload CVE-2023-0255 8.8 HighFebruary 13, 2023
shortpixel enable media replace Enable Media Replace < 4.0.0 - Admin+ Path Traversal CVE-2022-2554 4.9 MediumOctober 10, 2022
shortpixel adaptive images, adaptive images (wordpress plugin) +1 more WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability CVE-2022-29417 4.3 MediumApril 25, 2022
kubiq wp svg images WP SVG Images < 3.4 - Authenticated (author+) Stored XSS via SVG CVE-2021-24386 5.4 MediumJuly 6, 2021