EWWW Image Optimizer

WordPress plugin · ewww-image-optimizer · WordPress.org ↗

Critical

High

Known total

Unfixed

Running EWWW Image Optimizer on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 10.0	EWWW Image Optimizer [ewww-image-optimizer] < 2.8.5 WPVulnerability	< 2.8.5	v2.8.5	CVE-2016-20010	Jun 8, 2016
HIGH CVSS 7.2	EWWW Image Optimizer [ewww-image-optimizer] < 8.7.7 WPVulnerability	< 8.7.7	v8.7.7	CVE-2026-84773	Aug 18, 2026
MEDIUM CVSS 6.1	EWWW Image Optimizer [ewww-image-optimizer] < 8.8.0 WPVulnerability	< 8.8.0	v8.8.0	CVE-2026-92826	Oct 3, 2026
MEDIUM CVSS 4.4	EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler CVE.org	>=0, <8.8.0	v8.8.0	CVE-2026-91072	Sep 30, 2026
MEDIUM CVSS 6.6	EWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta CVE.org	>=8.6.0, <8.8.0	v8.8.0	CVE-2026-91051	Sep 30, 2026
MEDIUM CVSS 6.5	EWWW Image Optimizer [ewww-image-optimizer] < 8.8.0 WPVulnerability	< 8.8.0	v8.8.0	CVE-2026-97067	Sep 30, 2026
MEDIUM CVSS 6.8	EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansion CVE.org	>=0, <8.7.7	v8.7.7	CVE-2026-91011	Sep 17, 2026
MEDIUM CVSS 4.3	EWWW Image Optimizer [ewww-image-optimizer] < 7.3.0 WPVulnerability	< 7.3.0	v7.3.0	CVE-2024-31924	Apr 10, 2024
MEDIUM CVSS 6.4	EWWW Image Optimizer [ewww-image-optimizer] < 8.7.4 WPVulnerability	< 8.7.4	v8.7.4	CVE-2026-15446	Apr 10, 2024
MEDIUM CVSS 5.3	EWWW Image Optimizer [ewww-image-optimizer] < 7.2.1 WPVulnerability	< 7.2.1	v7.2.1	CVE-2023-40600	Nov 14, 2023
MEDIUM CVSS 4.3	EWWW Image Optimizer [ewww-image-optimizer] < 5.9 WPVulnerability	< 5.9	v5.9	CVE-2020-36750	Sep 6, 2020
NONE CVSS 0.0	EWWW Image Optimizer [ewww-image-optimizer] < 5.9 WPVulnerability	< 5.9	v5.9	CVE-2021-4342	Jun 7, 2023
NONE CVSS 0.0	EWWW Image Optimizer [ewww-image-optimizer] < 2.0.2 WPVulnerability	< 2.0.2	v2.0.2	CVE-2014-6243	Sep 4, 2014
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] >= 8.6.0 - < 8.8.0 WPVulnerability	>= 8.6.0, < 8.8.0	v8.8.0	CVE-2026-91051	Sep 30, 2026
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 8.8.0 WPVulnerability	< 8.8.0	v8.8.0	CVE-2026-91072	Sep 30, 2026
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 8.7.7 WPVulnerability	< 8.7.7	v8.7.7	CVE-2026-91011	Sep 2, 2026
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 7.2.1 WPVulnerability	< 7.2.1	v7.2.1	—	Sep 8, 2023
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 5.8.2 WPVulnerability	< 5.8.2	v5.8.2	—	Sep 16, 2020
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 2.8.4 WPVulnerability	< 2.8.4	v2.8.4	—	Jun 9, 2016
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 7.2.1 WPVulnerability	< 7.2.1	v7.2.1	—	—
UNKNOWN	EWWW Image Optimizer [ewww-image-optimizer] < 5.9 WPVulnerability	< 5.9	v5.9	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.