TinyPNG – JPEG, PNG & WebP image compression

WordPress plugin · tiny-compress-images · WordPress.org ↗

Latest v3.8.0 Last release Aug 25, 2026 Tested up to WP 7.1.1 100,000+ active installs

Critical

High

Known total

Unfixed

Running TinyPNG – JPEG, PNG & WebP image compression on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.1	TinyPNG – JPEG, PNG & WebP image compression [tiny-compress-images] < 3.6.14 WPVulnerability	< 3.6.14	v3.6.14	CVE-2026-7311	Jul 2, 2026
MEDIUM CVSS 5.4	TinyPNG – JPEG, PNG & WebP image compression [tiny-compress-images] < 3.4.4 WPVulnerability	< 3.4.4	v3.4.4	CVE-2024-47635	Sep 30, 2024

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.