ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization

Уязвимости

• CVE-2023-32512без авторизации · нужен клик≤ 3.7.1

  WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-57342подписчик+≤ 3.11.3

  WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-56066без авторизации≤ 3.11.4

  WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability

  Средний 5.8

• CVE-2025-30853нужен вход≤ 3.10.0

  WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability

  Средний 5.4

• CVE-2024-31230без авторизации≤ 3.8.2

  WordPress ShortPixel Adaptive Images plugin <= 3.8.2 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2025-6626админ≤ 3.10.4

  ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL

  Средний 4.4

• CVE-2024-35172высокие права≤ 3.8.3

  WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability

  Средний 4.4

• CVE-2024-4689без авторизации · нужен клик≤ 3.8.3

  WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3

• CVE-2026-15345подписчик+≤ 3.11.5

  ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter

  Средний 4.3

• CVE-2022-29417подписчик+≤ 3.3.1

  WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability

  Средний 4.3