Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

Information

Software Type Plugin
Software Slug optimole-wp (view on wordpress.org)
Software Status Active
Software Author optimole
Software Downloads 8,527,480
Software Active Installs 200,000
Software Record Last Updated July 17, 2026

8 Vulnerabilities

Submit a Vulnerability
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.7 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-57673
Jun 30, 2026
Researcher: daroo
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action
4.3
CVE-2026-11784
Jun 17, 2026
Researcher: Alexandru Bucur
Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter
7.2
CVE-2026-5217
Apr 10, 2026
Researcher: Quốc Huy (jtwings)
Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL
6.1
CVE-2026-5226
Apr 10, 2026
Researchers: Ali Cem Havare, Sencer Kılıç, Cesi De Taranto
Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload
4.3
CVE-2025-11519
Oct 17, 2025
Researcher: Dmitrii Ignatyev
Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
6.4
CVE-2024-4636
May 14, 2024
Researcher: wesley (wcraft)
ThemeIsle SDK <= Various Versions - Missing Authorization
5.3
CVE-2024-1047
Feb 1, 2024
Researcher: Francesco Carlucci
Image optimization & Lazy Load <= 3.3.1 - Admin+ Stored Cross-Site Scripting
4.8
CVE-2022-0969
Mar 21, 2022
Researcher: Kévin Mosbahi (Mika)
Title Status CVE ID CVSS Researchers Date
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.7 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-57673 7.2 daroo June 30, 2026
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action Patched CVE-2026-11784 4.3 Alexandru Bucur June 17, 2026
Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter Patched CVE-2026-5217 7.2 Quốc Huy (jtwings) April 10, 2026
Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL Patched CVE-2026-5226 6.1 Ali Cem Havare, Sencer Kılıç, Cesi De Taranto April 10, 2026
Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload Patched CVE-2025-11519 4.3 Dmitrii Ignatyev October 17, 2025
Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload Patched CVE-2024-4636 6.4 wesley (wcraft) May 14, 2024
ThemeIsle SDK <= Various Versions - Missing Authorization Patched CVE-2024-1047 5.3 Francesco Carlucci February 1, 2024
Image optimization & Lazy Load <= 3.3.1 - Admin+ Stored Cross-Site Scripting Patched CVE-2022-0969 4.8 Kévin Mosbahi (Mika) March 21, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation