WordPress security by component
ShortPixel Adaptive Images
Plugin description
ShortPixel Adaptive Images is a WordPress component with 10 published CVE records in this archive. The latest tracked vulnerability was published Jul 02, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
shortpixel-adaptive-imagesLatest vulnerability
CVE-2026-57342: ShortPixel Adaptive Images: Cross-site scripting
ShortPixel Adaptive Images is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.11.3.
| Safe version |
|
||
|---|---|---|---|
| Jul 02, 2026 |
CVE-2026-57342
ShortPixel Adaptive Images: Cross-site scripting
ShortPixel Adaptive Images is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.11.3.
|
3.11.4 |
CVE6.5
NVDPending
|
| Jun 26, 2026 |
CVE-2026-56066
ShortPixel Adaptive Images: Arbitrary file deletion
ShortPixel Adaptive Images is affected by arbitrary file deletion. The vulnerable path is reachable without authentication. A successful request can remove files outside the intended scope and may make the site unavailable. The published affected range is n/a through 3.11.4.
|
3.11.5 |
CVE5.8
NVDPending
|
| Aug 02, 2025 |
CVE-2025-6626
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization: Cross-site scripting
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization is affected by cross-site scripting. Exploitation requires at least administrator-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.4
NVDPending
|
| Apr 01, 2025 |
CVE-2025-30853
ShortPixel Adaptive Images: A security weakness
ShortPixel Adaptive Images is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVDPending
|
| May 14, 2024 |
CVE-2024-4689
ShortPixel Adaptive Images: Cross-site request forgery
ShortPixel Adaptive Images is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| May 14, 2024 |
CVE-2024-35172
ShortPixel Adaptive Images: Server-side request forgery
ShortPixel Adaptive Images is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
|
See mitigation notes |
CVE4.4
NVDPending
|
| Apr 10, 2024 |
CVE-2024-31230
ShortPixel Adaptive Images: A security weakness
ShortPixel Adaptive Images is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Nov 09, 2023 |
CVE-2023-32512
Shortpixel Adaptive Images: Cross-site request forgery
Shortpixel Adaptive Images is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Feb 27, 2023 |
CVE-2023-0334
ShortPixel Adaptive Images: Cross-site scripting
ShortPixel Adaptive Images is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|
| Apr 25, 2022 |
CVE-2022-29417
ShortPixel Adaptive Images: A security weakness
ShortPixel Adaptive Images is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD4.3
|