OO
Product
Optimole – Optimize Images in Real Time
5
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Optimole – Optimize Images in Real Time to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5217 | 7.2 | Apr 11 | Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter Affected: through 4.2.2 |
| CVE-2024-4636 | 6.4 | May 15 | Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload Affected: through 3.12.10 |
| CVE-2026-5226 | 6.1 | Apr 11 | Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL Affected: through 4.2.3 |
| CVE-2024-1047 | 5.3 | Feb 2 | ThemeIsle SDK <= Various Versions - Missing Authorization Affected: through 3.12.4 |
| CVE-2025-11519 | 4.3 | Oct 18 | Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload Affected: through 4.1.0 |
Showing 5