Medium · 5.4 CVE-2025-30853 EUVD-2025-9473GHSA-fxj6-7gh4-px89

WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability

Published Apr 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ShortPixel Product: ShortPixel Adaptive Images

Description

Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Adaptive Images: from n/a through <= 3.10.0.

Affected products

Vendor	Product	Affected	Fixed
ShortPixel	ShortPixel Adaptive Images	≤ 3.10.0	—

References

https://patchstack.com/database/Wordpress/Plugin/shortpixel-adaptive-images/vulnerability/wordpress-shortpixel-adaptive-images-plugin-3-10-0-broken-authentication-vulnerability?_s_id=cve vdb-entry