Skip to content
Noroxi

Optimole – Optimize Images in Real Time

optimole-wp · plugin

Known security vulnerabilities for Optimole – Optimize Images in Real Time. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

1 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2026-77365

    Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter

    High 7.2

  • CVE-2026-5217

    Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter

    High 7.2

  • CVE-2026-57673

    WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-102375

    WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2024-4636

    Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

    Medium 6.4

  • CVE-2026-5226

    Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL

    Medium 6.1

  • CVE-2026-11784

    Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Acti

    Medium 4.3

  • CVE-2025-11519

    Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload

    Medium 4.3

← Back to directory