All 5 CVE vulnerabilities found in ShortPixel Image Optimizer, with AI-generated Chinese analysis, references, and POCs.
Vendor: ShortPixel
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-103070 | WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2026-10-08 |
| CVE-2026-97246 | WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability CWE-502 | 4.9 | Medium | 2026-09-30 |
| CVE-2026-39471 | WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability CWE-502 | 7.2 | High | 2026-06-15 |
| CVE-2024-48044 | WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability CWE-862 | 5.4 | Medium | 2024-11-01 |
| CVE-2024-48043 | WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability CWE-89 | 7.6 | High | 2024-10-17 |
All 5 known CVE vulnerabilities affecting ShortPixel Image Optimizer with full Chinese analysis, references, and POCs where available.