Exposure of EWWW Image Optimizer

Performance, WordPress plugins

34

exposure score

55,068

sites use

0

exploited

0

critical

CVEs

11 results

CVE-2023-40600MEDIUMWordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data ExposureEPSS 2.0%CVE-2026-91011MEDIUMEWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference ExpansionEPSS 0.4%CVE-2026-15446MEDIUMEWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post ContentEPSS 0.4%CVE-2020-36750MEDIUMEWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2026-91051MEDIUMEWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post MetaEPSS 0.3%CVE-2026-84773HIGHWordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-31924MEDIUMWordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2026-92826MEDIUMEWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter KeyEPSS 0.2%CVE-2026-97067MEDIUMWordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-91049MEDIUMEWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load AttributeEPSS 0.2%CVE-2026-91072MEDIUMEWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration HandlerEPSS 0.2%