Skip to content
OpenAdvisories

Product · ShortPixel

ShortPixel Image Optimizer

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-103070

    WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Stored XSS.This issue affects ShortPixel Image Optimizer: from n/a through 6.5.6.

    ShortPixel ShortPixel Image Optimizer
  • Medium 4.9
    CVE-2026-97246

    WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Object Injection.This issue affects ShortPixel Image Optimizer: from n/a through 6.5.5.

    ShortPixel ShortPixel Image Optimizer
  • Medium 5.4
    CVE-2024-48044

    WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Image Optimizer: from n/a through <= 5.6.3.

    ShortPixel ShortPixel Image Optimizer