TinyPNG Image Optimization – Image Compression JPEG & PNG | Convert to WebP & AVIF

WordPress plugin · tiny-compress-images · WordPress.org ↗

Latest v3.8.1 Last release Oct 13, 2026 Tested up to WP 7.1.4 100,000+ active installs

Critical

High

Known total

Unfixed

Running TinyPNG Image Optimization – Image Compression JPEG & PNG | Convert to WebP & AVIF on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.1	TinyPNG Image Optimization – Image Compression JPEG & PNG \| Convert to WebP & AVIF [tiny-compress-images] < 3.6.14 WPVulnerability	< 3.6.14	v3.6.14	CVE-2026-7311	Jul 2, 2026
MEDIUM CVSS 5.4	TinyPNG Image Optimization – Image Compression JPEG & PNG \| Convert to WebP & AVIF [tiny-compress-images] < 3.4.4 WPVulnerability	< 3.4.4	v3.4.4	CVE-2024-47635	Sep 30, 2024

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.