TinyPNG vulnerabilities
We track 1 vulnerability in TinyPNG products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 2, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest TinyPNG vulnerabilities
- 8.1 High severity
TinyPNG – JPEG, PNG & WebP image compression: Improper Limitation of a Pathname to a Restricted Directory
The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_converted_image_size function in all versions up to, and including, 3.6.13. This makes it poss