Read the docs

ShortPixel

Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

ShortPixel records in CISA KEV

No ShortPixel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Enable Media Replace 4 records HIGH Shortpixel Adaptive Images 3 records MEDIUM Image Optimizer 1 record LOW

Records

3 records in Shortpixel Adaptive Images · all components

TI-2023-00318 CVE-2023-0334 · GHSA-w9f3-8wj5-2vvr

ShortPixel Adaptive Images < 3.6.3 - Reflected XSS

Priority MEDIUM 60

The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against any hig…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00881 Published 2023-02-27 Fixed in 3.6.3
TI-2022-11887 CVE-2022-29417 · GHSA-2w64-8h5x-5x42

WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability

Priority LOW 21

Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00631 Published 2022-04-25 No fix listed CWE-284
Open these records in search →