Vulnerabilities / Smush – Lazy Load Images, Optimize & Compress Images
Smush – Lazy Load Images, Optimize & Compress Images vulnerabilities
Advisories WPSec published for Smush – Image Optimization, Compression, Lazy Load, WebP & CDN. Other sources may list more. Its attack surface: Smush – Lazy Load Images, Optimize & Compress Images on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0237 | Smush – Lazy Load Images, Optimize & Compress Images <= 4.3.3 - Authenticated (Administrator+) Missing Authorization to Network-Wide Settings Modification on Multisite | Low 3.3 | 4.3.4 |
| 2026-10-02 | WPSEC-2026-0236 | Smush – Lazy Load Images, Optimize & Compress Images <= 4.3.3 - Improper Certificate Validation to WPMU DEV API Key Exposure in Hub Connector | Medium 6.5 | 4.3.4 |
License: CC BY 4.0