What’s Vulnerable › Vulnerabilities
CVE-2025-22288: WordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerability
- Severity: medium (CVSS 4.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-11-06 · updated 2026-10-07
- Weakness: CWE-35
Description
Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.
Affected products
- WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization: through 3.17.0
References
Get alerted when CVE-2025-22288 or the next vulnerability affects your stack