Medium
CVE-2026-103070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
High
CVE-2026-97246
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF <= 6.5.5 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-17086
ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content
High
CVE-2026-39471
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF <= 6.4.3 - Authenticated (Author+) PHP Object Injection
Medium
CVE-2026-4335
ShortPixel Image Optimizer <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title
Medium
CVE-2026-1246
ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
Medium
CVE-2025-11378
ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export
Medium
CVE-2024-48043
ShortPixel Image Optimizer <= 5.6.3 - Authenticated (Editor+) SQL Injection
Medium
CVE-2024-48044
ShortPixel Image Optimizer <= 5.6.3 - Missing Authorization
Medium
9f23bf62-6008-4a9c-a7ae-a2e513699684
ShortPixel Image Optimizer <= 5.4.1 - Authenticated(Editor+) PHP Object Injection
Medium
7f9b86a3-c68a-443f-a2f3-5f31f3280a6f
ShortPixel Image Optimizer <= 4.22.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.