OP
Vendor
optimole
13
CVEs
0
On KEV
1
New 30D
Products
OP7.1
Optimole
Optimole
2 CVEs0 on KEV1 new
OO7.2
Optimole – Optimize Images in Real Time
optimole
5 CVEs0 on KEV0 new
SP7.2
Super Page Cache
optimole
3 CVEs0 on KEV0 new
OO7.2
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
optimole
2 CVEs0 on KEV0 new
SP6.1
Super Page Cache for Cloudflare
Optimole
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102375 | OP Optimole Optimole | 6.5 | Sep 30 | WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability |
| CVE-2026-77365 | OO Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization optimole | 7.2 | Aug 28 | Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter |
| CVE-2026-57673 | OP Optimole Optimole | 7.1 | Jul 2 | WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-11784 | OO Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization optimole | 4.3 | Jun 18 | Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action |
| CVE-2026-5217 | OO Optimole – Optimize Images in Real Time optimole | 7.2 | Apr 11 | Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter |
| CVE-2026-5226 | OO Optimole – Optimize Images in Real Time optimole | 6.1 | Apr 11 | Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL |
| CVE-2026-1843 | SP Super Page Cache optimole | 7.2 | Feb 14 | Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log |
| CVE-2025-11519 | OO Optimole – Optimize Images in Real Time optimole | 4.3 | Oct 18 | Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload |
| CVE-2024-4636 | OO Optimole – Optimize Images in Real Time optimole | 6.4 | May 15 | Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload |
| CVE-2024-27968 | SP Super Page Cache for Cloudflare Optimole | 6.1 | Mar 21 | WordPress Super Page Cache for Cloudflare plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability |
| CVE-2024-1047 | SP Super Page Cache optimole | 5.3 | Feb 2 | ThemeIsle SDK <= Various Versions - Missing Authorization |