Skip to contentShortpixel Image Optimizer vulnerabilities
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1030706.5 Medium
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerabilityCVE-2026-972464.9 Medium
- shortpixel image optimizer – optimize images, convert webp & avifShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post ContentCVE-2026-170868.8 High
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerabilityCVE-2026-394717.2 High
- shortpixel image optimizer – optimize images, convert webp & avifShortPixel Image Optimizer <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment TitleCVE-2026-43355.4 Medium
- shortpixel image optimizer – optimize images, convert webp & avifShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' ParameterCVE-2026-12464.9 Medium
- shortpixel image optimizer – optimize images, convert webp & avifShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/ExportCVE-2025-113785.4 Medium
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerabilityCVE-2024-480445.4 Medium
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerabilityCVE-2024-480437.6 High