Pricing
Case studies
Login
Start trial
EWWW Image Optimizer
Shane Bishop
Developer
8.8.0
Latest version
1,000,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
12 patched
3 Mitigation rules
Reflected Cross-Site Scripting vulnerability
<= 8.7.7
10 hours ago
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability
8.6.0-8.7.7
3 days ago
Cross Site Scripting (XSS) vulnerability
<= 8.7.7
3 days ago
Admin+ WebP File Rename and Deletion vulnerability
< 8.8.0
3 days ago
Author+ Stored XSS vulnerability
< 8.7.7
17/09/2026
Cross Site Scripting (XSS) vulnerability
<= 8.7.6
02/09/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content vulnerability
<= 8.7.3
20/08/2026
Cross Site Request Forgery (CSRF) vulnerability
<= 7.2.3
10/04/2024
Sensitive Data Exposure vulnerability
<= 7.2.0
14/11/2023
Cross-Site Request Forgery (CSRF) vulnerability
<= 5.8.1
16/09/2020
Remote Code Execution
<= 2.8.3
09/06/2016
XSS
<= 2.0.1
04/09/2014