Plugin icon

TinyPNG – JPEG, PNG & WebP image compression

tiny-compress-images

Vulnerabilities:

2

Last Updated:

June 30, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-07-02
Title
TinyPNG < 3.6.14 - Author+ Arbitrary File Deletion via convert.path in tiny_compress_images Post Meta
Fixed in
Fixed in 3.6.14
CVSS
6.5 (medium)
Published
2024-09-30
Title
TinyPNG < 3.4.4 - Cross-Site Request Forgery
Fixed in
Fixed in 3.4.4
CVSS
4.3 (medium)