TinyPNG vulnerabilities
2 published CVEs name TinyPNG among the affected products.
- 2Published CVEs2 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-7311
TinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta
tinypng · TinyPNG – JPEG, PNG & WebP image compression
High8.1 - CVE-2024-47635
WordPress TinyPNG plugin <= 3.4.3 - Cross Site Request Forgery (CSRF) vulnerability
TinyPNG · TinyPNG
Medium5.4