S
Vendor security profile
shortpixel
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
2
1
CVE KEV
CVE severity distribution
4toplam CVE
High1 (25%)
Medium3 (75%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.5
CVE-2026-103070
WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability
S
Patch status unknownEPSS %0
4.9
CVE-2026-97246
WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
S
Patch status unknownEPSS %0
8.8
CVE-2026-17086
ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content
S
Patch status unknownEPSS %1
4.3
CVE-2026-15345
ShortPixel Adaptive Images <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter
S
Patch status unknownEPSS %0