← WordPress Vulnerabilities
WordPress security by component

ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF

ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 18, 2025; the highest CVE/CNA score is 5.4.

Plugin slug: shortpixel-image-optimizer-optimize-images-convert-webp-avif

CVE-2025-11378: ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF: A security weakness

ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedOct 18, 2025
Safe version guidanceSee mitigation notes
Safe version
Oct 18, 2025 CVE-2025-11378
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF: A security weakness
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVDPending