ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization, with AI-generated Chinese analysis, references, and POCs.

Vendor: ShortPixel

CVE ID	Title	CVSS	Severity	Published
CVE-2026-15345	ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter CWE-862	4.3	Medium	2026-08-16
CVE-2025-6626	ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL CWE-79	4.4	Medium	2025-08-02
CVE-2023-32512	WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352	4.3	Medium	2023-11-09

All 3 known CVE vulnerabilities affecting ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization with full Chinese analysis, references, and POCs where available.