Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting

Image Optimizer by 10web before 1.0.26 is susceptible to cross-site scripting via the iowdtabsactive parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can...

CVE-2025-25163-Nuclei-Template

Nuclei Template for CVE-2025-25163 🚀 Overview This repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability CVE-2025-25163 in the Plugin A/B Image Optimizer for WordPress. This vulnerability poses a critical security risk, allowing unauthorized access...

CVE-2026-31891

MongoLite 집계 최적화 프로그램의 toJsonExtractRaw를 통한 SQL 인젝션 취약점 클래스 : SQL 인젝션 CWE-89 제품 : Cockpit CMS Core Edition 영향을 받는 버전 : 2.13.4 및 집계 최적화 프로그램이 도입된 이후의 모든 버전으로 추정 테스트된 Docker 이미지 : cockpithq/cockpit:core-2.13.4 소스 커밋 : 7fe563023b7fae854c857d2e2dc0878ef28fbb5f 태그 2.13.4 GitHub :...

CVE-2026-103070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Stored XSS.This issue affects ShortPixel Image Optimizer: from n/a through 6.5.6...

EUVD-2026-94944

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Stored XSS.This issue affects ShortPixel Image Optimizer: from n/a through 6.5.6...

CVE-2026-103070

The ShortPixel Image Optimizer WordPress plugin (versions 6.5.6 and below ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation . This vulnerability allows an attacker to execute malicious scripts in the context of...

CVE-2026-103070 WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Stored XSS.This issue affects ShortPixel Image Optimizer: from n/a through 6.5.6...

WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin ShortPixel Image Optimizer versions = 6.5.6...

EUVD-2026-94049

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65142

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65142

The NVIDIA Model-Optimizer software is vulnerable to the deserialization of untrusted data (CWE-502). A successful exploit could allow an attacker to achieve code execution , data tampering , denial of service , and information disclosure . No specific affected versions, remediation steps, or exp...

CVE-2026-65142

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65142

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

PT-2026-107288

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2023-40600

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - 인증되지 않은 사용자의 디버그 로그를 통한 민감 정보 노출 설명 EWWW Image Optimizer 플러그인WordPress용은 7.2.0까지의 모든 버전에서 debuglog 함수를 통해 민감 정보 노출에 취약합니다. 이를 통해 인증되지 않은 공격자가 디버그 로깅이 활성화된 경우 민감한 디버그 데이터를 추출할 수 있습니다. Severity: medium CVE ID: CVE-2023-40600 CVSS Score: 5.3 CVSS Metrics...

CVE-2025-25163

CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Authenticated Subscriber+ Arbitrary File Download Description The Plugin A/B Image Optimizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3. This makes it possible for authenticated attackers,...

WordPress Robin Image Optimizer plugin 2.0.0-2.0.7 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Robin image optimizer versions 2.0.0-2.0.7...

WordPress EWWW Image Optimizer plugin <= 8.7.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin EWWW Image Optimizer versions = 8.7.7...

CVE-2026-92826

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2026-92826 EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...