CVE-2024-4636 Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

🗓️ 15 May 2024 06:51:55Reported by WordfenceType

CVE-2024-4636 Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Stored XSS via SVG Uploa

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Image Optimization by Optimole 安全漏洞	15 May 202400:00	–	cnnvd
CVE	CVE-2024-4636	15 May 202406:51	–	cve
EUVD	EUVD-2024-44240	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4636	15 May 202407:15	–	nvd
Patchstack	WordPress Optimole Plugin <= 3.12.10 is vulnerable to Cross Site Scripting (XSS)	15 May 202400:00	–	patchstack
Patchstack	WordPress Image Optimization by Optimole plugin <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability	15 May 202401:52	–	patchstack
RedhatCVE	CVE-2024-4636	23 May 202508:46	–	redhatcve
Vulnrichment	CVE-2024-4636 Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload	15 May 202406:51	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence
WPVulnDB	Image Optimization by Optimole < 3.13.0 - Author+ Stored Cross-Site Scripting via SVG Upload	14 May 202400:00	–	wpvulndb

[
  {
    "vendor": "optimole",
    "product": "Optimole – Optimize Images in Real Time",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.12.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/optimole-wp/tags/3.12.10/inc/admin.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/be88566d-fc84-442d-bb34-834ad9f4465b
plugins	www.plugins.trac.wordpress.org/changeset/3086306/

08 Apr 2026 17:19Current

6Medium risk

Vulners AI Score6

CVSS 3.16.4

EPSS0.0038

CWE-79