Vendor
Optimole
14 known vulnerabilities in products by Optimole, 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-77365 | Cross-site Scripting (CVE-2026-77365) | 7.2 | |
| High | CVE-2026-120739 | Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor | 7.2 | |
| High | CVE-2026-120677 | Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment Content | 7.2 | |
| High | CVE-2026-119070 | Cross-site Scripting (CVE-2026-119070) | 7.2 | |
| High | CVE-2026-5217 | Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter | 7.2 | |
| Medium | CVE-2026-102375 | WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2026-5226 | Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL | 6.1 | |
| High | CVE-2026-57673 | WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2026-1843 | Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log | 7.2 | |
| Medium | CVE-2024-1047 | ThemeIsle SDK <= Various Versions - Missing Authorization | 5.3 | |
| Medium | CVE-2024-4636 | Optimole: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-11784 | Cross-Site Request Forgery (CSRF) (CVE-2026-11784) | 4.3 | |
| High | CVE-2024-27968 | Optimole Super Page Cache for Cloudflare: Cross-Site Request Forgery (CSRF) | 7.1 | |
| Medium | CVE-2025-11519 | Optimole: Authorization Bypass Through User-Controlled Key | 4.3 |