Skip to content

Known vulnerabilities in Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

Is your version affected?

CVE Summary Score Published
CVE-2026-120677 Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment Content 7.2 High Nov 7, 2026
CVE-2026-120739 Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor 7.2 High Nov 7, 2026
CVE-2026-119070 Optimole <= 4.2.17 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Backslash-Escaped Unicode in URL Replacer 7.2 High Nov 7, 2026
CVE-2026-77365 The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is… 7.2 High Aug 28, 2026
CVE-2026-11784 The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is… 4.3 Medium Jun 18, 2026
CVE-2025-11519 The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is… 4.3 Medium Oct 18, 2025

Other Optimole products