Unknown EWWW Image Optimizer

3 known vulnerabilities in Unknown EWWW Image Optimizer, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-91072 CVSS 4.4 medium The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own…
CVE-2026-91051 CVSS 6.6 medium The EWWW Image Optimizer WordPress plugin before 8.8.0 does not prevent authenticated users with author-level permissions from storing a…
CVE-2026-91011 CVSS 6.8 medium The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it rewrites page output…