| 2026-10-21 |
WPSEC-2026-1330 |
Optimole <= 4.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes |
Medium 6.4 |
4.2.17 |
| 2026-10-02 |
WPSEC-2026-0296 |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Attachment Replacement |
Medium 6.4 |
4.2.15 |
| 2026-10-02 |
WPSEC-2026-0295 |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.14 - Unauthenticated CSS Injection via Background Lazyload Selectors |
Medium 5.8 |
4.2.15 |
| 2026-10-02 |
WPSEC-2026-0294 |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.14 - Authenticated (Subscriber+) Sensitive Information Exposure via Dashboard Widget |
Medium 6.5 |
4.2.15 |
| 2026-10-01 |
WPSEC-2026-0156 |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload |
Medium 6.4 |
4.2.16 |
