A3rev A3 Lazy Load
2 CVEs affecting A3rev A3 Lazy Load. Latest disclosed: 2026-05-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6427 | Medium | 6.4 | 2026-05-28 | The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in th… |
CVE-2025-9873 | Medium | 6.4 | 2025-12-13 | The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.5 due to insufficient input saniti… |