What’s Vulnerable › Products

Optimole – Optimize Images in Real Time vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Optimole – Optimize Images in Real Time version is affected

Latest Optimole – Optimize Images in Real Time vulnerabilities

• CVE-2026-5226 — Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL (CVSS 6.1)
• CVE-2026-5217 — Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter (CVSS 7.2)
• CVE-2025-11519 — Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload (CVSS 4.3)
• CVE-2024-4636 — Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload (CVSS 6.4)