Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF 5.6.3

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 13, 2024

The ShortPixel Image Optimizer plugin for WordPress has a security issue that could allow hackers to access sensitive information from the database. This vulnerability affects versions up to 5.6.3 and is caused by not properly protecting user input and not adequately preparing the SQL query. Attackers with editor-level access or higher can inject their own SQL queries into the existing ones, giving them access to confidential data.

Detected in:

ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF fixed vulnerable versions: >= * <= 5.6.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.