Optimole vulnerabilities
We track 8 vulnerabilities in Optimole products across 4 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2026.
Latest Optimole vulnerabilities
- 7.1 High severity
Optimole – Optimize Images | Convert WebP &…: Deserialization of Untrusted Data
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the replace_urls_in_value function in all versions up to, and
- 7.2 High severity
Optimole – Optimize Images | Convert WebP &…: Improper Neutralization of Input During Web Page Generation
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's (missing_srcsets[*][*].s)' parameter in all versions up to, and including, 4.2.18 due to in
- 7.2 High severity
Optimole – Optimize Images | Convert WebP &…: Improper Neutralization of Input During Web Page Generation
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.2.18 due to insufficient input san
- 7.2 High severity
Optimole – Optimize Images | Convert WebP &…: Improper Neutralization of Input During Web Page Generation
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.2.17 due to insufficient input san
- 8.8 High severity
Optimole: Improper Neutralization of Input During Web Page Generation
The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored
- 7.2 High severity
Optimole – Optimize Images | Convert WebP &…: Improper Neutralization of Input During Web Page Generation
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' (above_fold_images) parameter in all versions up to, and including, 4.2.10 due to insuffic
- 7.2 High severity
Optimole – Optimize Images in Real Time: Improper Neutralization of Input During Web Page Generation
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.2.2. This is due to insufficient input sanitization and output
- 7.2 High severity
Super Page Cache: Improper Neutralization of Input During Web Page Generation
The Super Page Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Activity Log in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attac