Skip to content
OpenAdvisories
Medium · 4.1 CVE-2025-22288 EUVD-2025-38034GHSA-mwrg-545v-m46r

WordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.

Affected products

VendorProductAffectedFixed
WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization ≤ 3.17.0 —

References