Skip to content
Optimole Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
-
CVE-2026-120677
High 7.2
Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment Content
–
-
CVE-2026-120739
High 7.2
Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor
–
-
CVE-2026-119070
High 7.2
Optimole <= 4.2.17 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Backslash-Escaped Unicode in URL Replacer
–
-
CVE-2026-77365
High 7.2
Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter
0.5%
-
CVE-2026-11784
Medium 4.3
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action
0.2%