Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ShortPixel — Vulnerabilities & Security Advisories 27

Browse all 27 CVE security advisories affecting ShortPixel. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ShortPixel is an image optimization service that compresses and delivers web images to improve website performance. Historically, the platform has been vulnerable to multiple security issues including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities. These flaws have allowed attackers to execute arbitrary code, manipulate web content, or gain unauthorized access to systems. The service has accumulated 18 CVEs, indicating a pattern of security concerns that have required patches and updates. While no major public security incidents have been widely reported, the consistent discovery of vulnerabilities suggests ongoing challenges in maintaining secure image processing and delivery infrastructure.

Found 4 results / 27 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-17086 ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content — ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF CWE-502 8.8 High 2026-09-18
CVE-2026-4335 ShortPixel Image Optimizer <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title — ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF CWE-79 5.4 Medium 2026-03-26
CVE-2026-1246 ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter — ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF CWE-22 4.9 Medium 2026-02-05
CVE-2025-11378 ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export — ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF CWE-862 5.4 Medium 2025-10-18

This page lists every published CVE security advisory associated with ShortPixel. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.