ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization vulnerabilities

Product

ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization

by shortpixel · last CVE Aug 16, 2026

CVEs

On KEV

4.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-6626	4.4	0%	Aug 2	ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL Affected: through 3.10.4
CVE-2026-15345	4.3	0%	Aug 16	ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter Affected: through 3.11.5