Optimole Optimole – Optimize Images in Real Time

• CVE-2026-5217 High 7.2 Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter 0.4%
• CVE-2026-5226 Medium 6.1 Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL 0.5%
• CVE-2025-11519 Medium 4.3 Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload 0.3%
• CVE-2024-4636 Medium 6.4 Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload 0.4%
• CVE-2024-1047 Medium 5.3 ThemeIsle SDK <= Various Versions - Missing Authorization 0.6%