Skip to contentShortpixel Adaptive Images vulnerabilities
- shortpixel adaptive images – webp, avif, cdn, image optimizationShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' ParameterCVE-2026-153454.3 Medium
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-573426.5 Medium
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerabilityCVE-2026-560665.8 Medium
- shortpixel adaptive images – webp, avif, cdn, image optimizationShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URLCVE-2025-66264.4 Medium
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerabilityCVE-2025-308535.4 Medium
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-351724.4 Medium
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-46894.3 Medium
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.8.2 - Broken Access Control vulnerabilityCVE-2024-312305.3 Medium
- shortpixel adaptive images – webp, avif, cdn, image optimization, adaptive images +1 moreWordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-325124.3 Medium
- shortpixel adaptive images, unknown shortpixel adaptive images +1 moreShortPixel Adaptive Images < 3.6.3 - Reflected XSSCVE-2023-03346.1 Medium
- shortpixel adaptive images, adaptive images (wordpress plugin) +1 moreWordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerabilityCVE-2022-294174.3 Medium