Vendor

    Optimole

    14 known vulnerabilities in products by Optimole, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Optimole
    HighCVE-2026-77365

    Cross-site Scripting (CVE-2026-77365)

    7.2
    HighCVE-2026-120739

    Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor

    7.2
    HighCVE-2026-120677

    Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    7.2
    HighCVE-2026-119070

    Cross-site Scripting (CVE-2026-119070)

    7.2
    HighCVE-2026-5217

    Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter

    7.2
    MediumCVE-2026-102375

    WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

    6.5
    MediumCVE-2026-5226

    Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL

    6.1
    HighCVE-2026-57673

    WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability

    7.1
    HighCVE-2026-1843

    Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log

    7.2
    MediumCVE-2024-1047

    ThemeIsle SDK <= Various Versions - Missing Authorization

    also in 8 other products

    5.3
    MediumCVE-2024-4636

    Optimole: Cross-site Scripting

    6.4
    MediumCVE-2026-11784

    Cross-Site Request Forgery (CSRF) (CVE-2026-11784)

    4.3
    HighCVE-2024-27968

    Optimole Super Page Cache for Cloudflare: Cross-Site Request Forgery (CSRF)

    7.1
    MediumCVE-2025-11519

    Optimole: Authorization Bypass Through User-Controlled Key

    4.3

    Products