Skip to content
OpenAdvisories

Vendor

nosilver4u

4 known vulnerabilities.

Products

EWWW Image Optimizer 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-92826

    EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key

    The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unau…

    nosilver4u EWWW Image Optimizer Web / CMS
  • Medium 6.4
    CVE-2026-15446

    EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content

    The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes…

    nosilver4u EWWW Image Optimizer Web / CMS
  • Medium 4.3
    CVE-2024-31924

    WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in nosilver4u EWWW Image Optimizer ewww-image-optimizer.This issue affects EWWW Image Optimizer: from n/a through <= 7.2.3.

    nosilver4u EWWW Image Optimizer
  • Medium 4.3
    CVE-2020-36750

    EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass

    The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on the ewww_ngg_bulk_init() function. This makes it possible for unauthenti…

    nosilver4u EWWW Image Optimizer Web / CMS