Optimole
7 CVEs across 6 Optimole products. Browse Optimole vulnerabilities, severities, and proof-of-concept exploits.
Optimole products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57673 | High | 7.1 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions. |
CVE-2026-11784 | Medium | 4.3 | 2026-06-18 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in… |
CVE-2026-5226 | Medium | 6.1 | 2026-04-11 | The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL paths in versions up to, and including… |
CVE-2026-5217 | High | 7.2 | 2026-04-11 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting i… |
CVE-2026-1843 | High | 7.2 | 2026-02-14 | The Super Page Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Activity Log in all versions up to, and including, 5.2.2 due to… |
CVE-2025-11519 | Medium | 4.3 | 2025-10-18 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Insecure Direct Object Refere… |
CVE-2024-4636 | Medium | 6.4 | 2024-05-15 | The Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘allow_meme_… |
CVE-2024-27968 | High | 7.1 | 2024-03-21 | Cross-Site Request Forgery (CSRF) vulnerability in Optimole Super Page Cache for Cloudflare allows Stored XSS.This issue affects Super Page Cache for Cloudflar… |
CVE-2024-1047 | Medium | 5.3 | 2024-02-02 | Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on th… |