Pricing

WordPress security

Instantly fix and mitigate vulnerabilities

Enterprise API

At scale monitoring and vPatching for hosts

Managed VDP

Start a security program for your plugin

Bug Bounty

Join the community and earn bounties

Plugin auditing

Paid auditing for WordPress vendors

Vulnerability database

The latest WordPress security intelligence
Login
Start trial
Smush Image Compression and Optimization Logo

Smush Image Compression and Optimization

Plugin

Changelog

VDP

Developer

WPMU DEV - Your All-in-One WordPress Platform

Latest version

3.22.1

Installations

1,000,000

Last updated

3 weeks ago

Vulnerability history

Not fixed 0 present
Fixed 5 patched

Directory Traversal vulnerability <= 3.17.0

Badge Patch priority: low Fixed

4.1

29 March, 2025

Authenticated Resmush List Deletion vulnerability <= 3.16.4

Patch priority: low Fixed

5.4

20 June, 2024

Reflected CrossSite Scripting (XSS) vulnerability <= 3.9.8

Patch priority: low Fixed

4.8

3 May, 2022

Authenticated XSS & Phar Deserialization vulnerabilities <= 2.9.1

Patch priority: low Fixed

9.8

10 December, 2018

File Traversal vulnerability <= 2.7.5

Patch priority: low Fixed

9 October, 2017

Vulnerability mitigation

Pricing Application security (SCA) RapidMitigateNEW Threat Intelligence (API) Documentation VS Monarx VS Imunify360 VS Wordfence Log in

Code security

Managed VDP Security Suite BETANEW Active VDP directory1029 Security auditing Compliance (CRA)NEW Log inNEW

Bug bounty

Bug bounty Leaderboard Guidelines LearnNEW Report Discord Log inNEW

Use cases

Web developers WebhostsNEW Software vendors WordPress WooCommerce

Resources

Vulnerability database Whitepaper 2025 Articles Case studiesNEW WebinarsNEW Vulnerability statistics

Patchstack

About Careers Merch store Media kit LinkedIn Facebook X
© 2025 Patchstack DPA Privacy Policy Accessibility Terms & Conditions

Vulnerability mitigation

Pricing Application security (SCA) RapidMitigateNEW Threat Intelligence (API) Documentation VS Monarx VS Imunify360 VS Wordfence Log in

Code security

Managed VDP Security Suite BETANEW Active VDP directory1029 Security auditing Compliance (CRA)NEW Log inNEW

Bug bounty

Bug bounty Leaderboard Guidelines LearnNEW Report Discord Log inNEW

Use cases

Web developers WebhostsNEW Software vendors WordPress WooCommerce

Resources

Vulnerability database Whitepaper 2025 Articles Case studiesNEW WebinarsNEW Vulnerability statistics

Patchstack

About Careers Merch store Media kit LinkedIn Facebook X
Mobile Menu

Let us know if we have missed a vulnerability reported elsewhere

Mobile Menu Close

Thank you for contributing!

Close Mobile Menu