Shortpixel
Shortpixel Image Optimizer: vulnerabilidades y CVE
Shortpixel Image Optimizer tiene 8 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses6
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-97246 | Media (4.9) | 0.22% | — | 30 sept 2026 | Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions. |
| CVE-2026-17086 | Alta (8.8) | 0.89% | — | 18 sept 2026 | The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This… |
| CVE-2026-39471 | Alta (7.2) | 0.54% | — | 15 jun 2026 | Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions. |
| CVE-2026-4335 | Media (5.4) | 0.31% | — | 26 mar 2026 | The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3. This is due to insufficient output escaping in… |
| CVE-2026-1246 | Media (4.9) | 0.55% | — | 5 feb 2026 | The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Arbitrary File Read via path traversal in the 'loadFile' parameter in all versions up to, and including, 6.4.2 due to insufficient path validation and… |
| CVE-2025-11378 | Media (5.4) | 0.31% | — | 18 oct 2025 | The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'shortpixel_ajaxRequest' AJAX action… |
| CVE-2024-48044 | Alta (8.8) | 0.39% | — | 1 nov 2024 | Missing Authorization vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Image… |
| CVE-2024-48043 | Alta (7.6) | 0.45% | — | 17 oct 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Blind SQL Injection.This issue affects… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.