Skip to content
OpenAdvisories

Vendor

ShortPixel

29 known vulnerabilities.

Products

Enable Media Replace 8 ShortPixel Adaptive Images 6 ShortPixel Image Optimizer 5 ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF 4 ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization 3 ShortPixel Critical CSS 1 ShortPixel Adaptive Images (WordPress plugin) 1 WP SVG Images 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-73186

    WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.

    ShortPixel Enable Media Replace
  • High 8.8
    CVE-2026-17086

    ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content

    The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated atta…

    ShortPixel ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF Web / CMS
  • High 7.2
    CVE-2026-39471

    WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability

    Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions.

    ShortPixel ShortPixel Image Optimizer
  • High 7.1
    CVE-2025-31081

    WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel Enable Media Replace enable-media-replace allows Reflected XSS.This issue affects Enable Media Replace: from n/a through <= 4.1.5.

    ShortPixel Enable Media Replace
  • High 7.6
    CVE-2024-48043

    WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Blind SQL Injection.This issue affects ShortPixel Image Optimizer: from n/a through <…

    ShortPixel ShortPixel Image Optimizer
  • High 7.6
    CVE-2024-32810

    WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2.

    ShortPixel ShortPixel Critical CSS