Advisories · Technology

ShortPixel Image Optimizer.

Every CVE that names ShortPixel Image Optimizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103070 CVE record

CVSS 6.5 Medium

WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability
- ShortPixel Image Optimizer
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2026
CVE-2026-97246 CVE record

CVSS 4.9 Medium

WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
- ShortPixel Image Optimizer
- Insecure deserialization
Not analysed yet 30 Sept 2026
CVE-2026-39471 CVE record

CVSS 7.2 High

WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability
- ShortPixel Image Optimizer
- Insecure deserialization
Not analysed yet 15 Jun 2026
CVE-2024-48044 CVE record

CVSS 5.4 Medium

WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability
- ShortPixel Image Optimizer
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-48043 CVE record

CVSS 7.6 High

WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability
- ShortPixel Image Optimizer
- SQL injection
Not analysed yet 17 Oct 2024