Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ShortPixel — Vulnerabilities & Security Advisories 27

Browse all 27 CVE security advisories affecting ShortPixel. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ShortPixel is an image optimization service that compresses and delivers web images to improve website performance. Historically, the platform has been vulnerable to multiple security issues including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities. These flaws have allowed attackers to execute arbitrary code, manipulate web content, or gain unauthorized access to systems. The service has accumulated 18 CVEs, indicating a pattern of security concerns that have required patches and updates. While no major public security incidents have been widely reported, the consistent discovery of vulnerabilities suggests ongoing challenges in maintaining secure image processing and delivery infrastructure.

Found 3 results / 27 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-15345 ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter — ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization CWE-862 4.3 Medium 2026-08-16
CVE-2025-6626 ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL — ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization CWE-79 4.4 Medium 2025-08-02
CVE-2023-32512 WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF) — ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization CWE-352 4.3 Medium 2023-11-09

This page lists every published CVE security advisory associated with ShortPixel. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.