Skip to content
OpenAdvisories

Vendor

Optimole

14 known vulnerabilities.

Products

Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization 5 Optimole – Optimize Images in Real Time 5 Super Page Cache 2 Optimole 2 Super Page Cache for Cloudflare 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-102375

    WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14.

    Optimole Optimole
  • Medium 4.3
    CVE-2026-11784 Public exploit

    Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action

    The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on t…

    Optimole Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization Web / CMS
  • Medium 6.1
    CVE-2026-5226

    Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL

    The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL paths in versions up to, and including, 4.2.3 This is due to insufficient output escaping on user-supplied URL paths in the get_current_ur…

    Optimole Optimole – Optimize Images in Real Time Web / CMS
  • Medium 4.3
    CVE-2025-11519

    Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload

    The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the /wp-json/optml/v1/move_image REST API endpoi…

    Optimole Optimole – Optimize Images in Real Time Web / CMS
  • Medium 6.4
    CVE-2024-4636

    Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

    The Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘allow_meme_types’ function in versions up to, and including, 3.12.10 due to insufficient input sanitization and…

    Optimole Optimole – Optimize Images in Real Time Web / CMS
  • Medium 5.3
    CVE-2024-1047

    ThemeIsle SDK <= Various Versions - Missing Authorization

    Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated atta…

    themeisle Optimole rsocial RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Web / CMS