A Cross Site Scripting (XSS) vulnerability exists in the ShortPixel Image Optimizer plugin for WordPress, affecting versions up to and including 6.5.6. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability is identified as CVE-2026-103070 and defenders should assess exposure and consider updating the plugin to mitigate potential risk [truncated]
The ShortPixel Image Optimizer plugin for WordPress, versions up to and including 6.5.5, is vulnerable to PHP Object Injection. This vulnerability arises from the deserialization of untrusted data, allowing an attacker to inject objects. The issue has a CVSS score of 4.9, indicating a medium severity level. Defenders should assess exposure and prioritize updates to mitigate this vulnerability. The vulnera [truncated]
A PHP object injection vulnerability exists in ShortPixel Image Optimizer versions up to 6.4.3. This issue allows an attacker to inject malicious PHP objects, potentially leading to arbitrary code execution. The vulnerability has a CVSS score of 7.2 and is classified as HIGH severity.
