Extension WordPress
Vulnérabilités Image Optimization – Compress Images and Convert to WebP or AVIF
Cette page rassemble les failles publiées pour Image Optimization – Compress Images and Convert to WebP or AVIF, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Image Optimization – Compress Images and Convert to WebP or AVIF
2 fiches
Image Optimizer <= 1.7.4 – Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection
The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the Image_Backup::remove() function where backup file paths stored in post meta…
*-1.7.4
1.7.5
01/07/2026
Image Optimizer by Elementor <= 1.7.1 – Missing Authorization
The Image Optimizer by Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers, with subscriber-level…
*-1.7.1
1.7.2
20/02/2026
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.