Plugin icon

ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization

shortpixel-adaptive-images

Vulnerabilities:

11

Last Updated:

August 20, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-08-15
Title
ShortPixel Adaptive Images < 3.11.6 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter
Fixed in
Fixed in 3.11.6
CVSS
4.3 (medium)
Published
2026-06-29
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.11.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.11.4
CVSS
6.4 (medium)
Published
2026-06-25
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.11.5 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 3.11.5
CVSS
5.3 (medium)
Published
2025-08-01
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.10.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL
Fixed in
Fixed in 3.10.5
CVSS
4.4 (medium)
Published
2025-04-01
Title
ShortPixel Adaptive Images < 3.10.1 - Missing Authorization
Fixed in
Fixed in 3.10.1
CVSS
4.3 (medium)
Published
2024-05-10
Title
ShortPixel Adaptive Images < 3.8.4 - Authenticated (Admin+) Server-Side Request Forgery
Fixed in
Fixed in 3.8.4
CVSS
5.5 (medium)
Published
2024-05-09
Title
ShortPixel Adaptive Images < 3.8.4 - Cross-Site Request Forgery
Fixed in
Fixed in 3.8.4
CVSS
4.3 (medium)
Published
2024-04-02
Title
ShortPixel Adaptive Images < 3.8.3 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
Fixed in
Fixed in 3.8.3
CVSS
5.3 (medium)
Published
2023-05-08
Title
ShortPixel Adaptive Images < 3.7.2 - Settings Update via CSRF
Fixed in
Fixed in 3.7.2
CVSS
4.3 (medium)
Published
2023-01-31
Title
ShortPixel Adaptive Images < 3.6.3 - Reflected XSS
Fixed in
Fixed in 3.6.3
CVSS
7.5 (high)
Published
2022-04-25
Title
ShortPixel Adaptive Images < 3.4.0 - Subscriber+ Arbitrary Settings Update
Fixed in
Fixed in 3.4.0
CVSS
4.3 (medium)