EWWW Image Optimizer vulnerabilities | LiveThreat CVE Feed

Product

EWWW Image Optimizer

by · last CVE Sep 30, 2026

CVEs

On KEV

6.8

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add EWWW Image Optimizer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-91011	6.8	0%	Sep 17	EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansion Affected: before 8.7.7
CVE-2026-91051	6.6	0%	Sep 30	EWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta Affected: 8.6.0 before 8.8.0
CVE-2026-91072	4.4	0%	Sep 30	EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler Affected: before 8.8.0