Optimole vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20251
3. 20267

Newest CVEs

• CVE-2026-102375

  WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

  Optimole · Optimole

  Medium6.5
• CVE-2026-77365

  Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter

  optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

  High7.2
• CVE-2026-57673

  WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability

  Optimole · Optimole

  High7.1
• CVE-2026-11784

  Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action

  optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

  Medium4.3
• CVE-2026-5217

  Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter

  optimole · Optimole – Optimize Images in Real Time

  High7.2
• CVE-2026-5226

  Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL

  optimole · Optimole – Optimize Images in Real Time

  Medium6.1
• CVE-2026-1843

  Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log

  optimole · Super Page Cache

  High7.2
• CVE-2025-11519

  Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload

  optimole · Optimole – Optimize Images in Real Time

  Medium4.3
• CVE-2024-4636

  Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

  optimole · Optimole – Optimize Images in Real Time

  Medium6.4
• CVE-2024-27968

  WordPress Super Page Cache for Cloudflare plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability

  Optimole · Super Page Cache for Cloudflare

  High7.1