ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF

WordPress plugin · shortpixel-image-optimiser · WordPress.org ↗

Latest v6.6.1 Last release Oct 14, 2026 Tested up to WP 7.1.4 300,000+ active installs

Critical

High

Known total

Unfixed

Running ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.2	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.4.4 WPVulnerability	< 6.4.4	v6.4.4	CVE-2026-39471	Apr 20, 2026
HIGH CVSS 8.8	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.5.6 WPVulnerability	< 6.5.6	v6.5.6	CVE-2026-17086	Apr 20, 2026
HIGH CVSS 7.6	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 5.6.4 WPVulnerability	< 5.6.4	v5.6.4	CVE-2024-48043	Oct 13, 2024
MEDIUM CVSS 6.5	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.6.0 WPVulnerability	< 6.6.0	v6.6.0	CVE-2026-103070	Sep 24, 2026
MEDIUM CVSS 4.9	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.5.6 WPVulnerability	< 6.5.6	v6.5.6	CVE-2026-97246	Sep 17, 2026
MEDIUM CVSS 5.4	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.3.5 WPVulnerability	< 6.3.5	v6.3.5	CVE-2025-11378	Oct 17, 2025
MEDIUM CVSS 5.4	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 5.6.4 WPVulnerability	< 5.6.4	v5.6.4	CVE-2024-48044	Oct 13, 2024
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.4.4 WPVulnerability	< 6.4.4	v6.4.4	CVE-2026-4335	Mar 25, 2026
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 6.4.3 WPVulnerability	< 6.4.3	v6.4.3	CVE-2026-1246	Feb 4, 2026
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 5.4.2 WPVulnerability	< 5.4.2	v5.4.2	—	Sep 15, 2023
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 5.4.2 WPVulnerability	< 5.4.2	v5.4.2	—	Sep 14, 2023
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 4.22.10 WPVulnerability	< 4.22.10	v4.22.10	—	Jun 14, 2022
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 4.22.10 WPVulnerability	< 4.22.10	v4.22.10	—	Jun 2, 2022
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 4.22.10 WPVulnerability	< 4.22.10	v4.22.10	—	—
UNKNOWN	ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 5.4.2 WPVulnerability	< 5.4.2	v5.4.2	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.