shortpixel vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20231
3. 20248
4. 20255
5. 202614

Newest CVEs

• CVE-2026-73186

  WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

  ShortPixel · Enable Media Replace

  High8.8
• CVE-2026-85655

  Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow

  shortpixel · Enable Media Replace

  Medium4.3
• CVE-2026-103070

  WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability

  ShortPixel · ShortPixel Image Optimizer

  Medium6.5
• CVE-2026-97246

  WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability

  ShortPixel · ShortPixel Image Optimizer

  Medium4.9
• CVE-2026-17086

  ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content

  shortpixel · ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF

  High8.8
• CVE-2026-15345

  ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter

  shortpixel · ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization

  Medium4.3
• CVE-2026-57342

  WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability

  ShortPixel · ShortPixel Adaptive Images

  Medium6.5
• CVE-2026-57722

  WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

  ShortPixel · Enable Media Replace

  Medium5.9
• CVE-2026-56066

  WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability

  ShortPixel · ShortPixel Adaptive Images

  Medium5.8
• CVE-2026-39471

  WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability

  ShortPixel · ShortPixel Image Optimizer

  High7.2