Vendor

    ShortPixel

    33 known vulnerabilities in products by ShortPixel, 0 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ShortPixel
    HighCVE-2026-17086

    Deserialization of Untrusted Data (CVE-2026-17086)

    		8.8
    HighCVE-2026-73186

    WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

    		8.8
    HighCVE-2023-4643

    Enable Media Replace < 4.1.3 - Author+ PHP Object Injection

    		8.8
    HighCVE-2023-0255

    Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload

    		8.8
    HighCVE-2026-39471

    WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability

    		7.2
    MediumCVE-2026-103070

    WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-56066

    WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability

    		5.8
    MediumCVE-2023-0334

    ShortPixel Adaptive Images < 3.6.3 - Reflected XSS

    		6.1
    MediumCVE-2022-2554

    Enable Media Replace < 4.0.0 - Admin+ Path Traversal

    		4.9
    HighCVE-2024-48043

    WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability

    		7.6
    MediumCVE-2026-1246

    Path Traversal (CVE-2026-1246)

    		4.9
    MediumCVE-2026-15345

    Missing Authorization (CVE-2026-15345)

    		4.3
    MediumCVE-2026-85655

    ShortPixel Enable Media Replace: Missing Authorization

    		4.3
    HighCVE-2025-31081

    WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-32810

    WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability

    		7.6
    MediumCVE-2026-97246

    WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability

    		4.9
    MediumCVE-2026-57342

    WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-5714

    ShortPixel Enable Media Replace: Cross-site Scripting

    		6.4
    MediumCVE-2026-57722

    WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2025-30853

    WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability

    		5.4
    MediumCVE-2025-9496

    ShortPixel Enable Media Replace: Cross-site Scripting

    		6.4
    MediumCVE-2026-2732

    ShortPixel Enable Media Replace: Missing Authorization

    		5.4
    MediumCVE-2025-11378

    ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export

    		5.4
    MediumCVE-2024-5945

    WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

    also in 1 other product

    		6.4
    MediumCVE-2026-4335

    Cross-site Scripting (CVE-2026-4335)

    		5.4

    All vulnerabilities in search

    Products

    Products by ShortPixel
    Enable Media Replace120
    Shortpixel Adaptive Images90
    Shortpixel Image Optimizer50
    Shortpixel Image Optimizer – Optimize Images, Convert Webp & Avif40
    Shortpixel Adaptive Images – Webp, Avif, Cdn, Image Optimization30