Optimole vulnerabilities
14 published CVEs name Optimole among the affected products.
- Published CVEs
- 14
- Last 12 months
- 10
- Critical
- 0
- Known exploited
- 0
Critical 0High 8Medium 6Low 0Not scored 0
CVEs per yearBy the year they were published
- 20243
- 20251
- 202610
Newest CVEs
- CVE-2026-120677
Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment Content
optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
High7.2 - CVE-2026-120739
Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor
optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
High7.2 - CVE-2026-119070
Optimole <= 4.2.17 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Backslash-Escaped Unicode in URL Replacer
optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
High7.2 - CVE-2026-102375
WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
Optimole · Optimole
Medium6.5 - CVE-2026-77365
Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter
optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
High7.2 - CVE-2026-57673
WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability
Optimole · Optimole
High7.1 - CVE-2026-11784
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action
optimole · Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
Medium4.3 - CVE-2026-5217
Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter
optimole · Optimole – Optimize Images in Real Time
High7.2 - CVE-2026-5226
Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL
optimole · Optimole – Optimize Images in Real Time
Medium6.1 - CVE-2026-1843
Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log
optimole · Super Page Cache
High7.2