[■] Plugin de WordPress

Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

11 expedientes en el radar

Comprueba tu versión de Smush – Image Optimization, Compression, Lazy Load, WebP & CDN Sólo las que se están explotando

[■] Registro

Vulnerabilidades (11)

4,3 Media

CVE-2026-118241: acceso a datos de otros usuarios (IDOR) en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2026-118241

T−3d 11 nov. 2026
6,4 Media

CVE-2026-120845: cross-site scripting (XSS) en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2026-120845

T−8d 6 nov. 2026
2,7 Baja

CVE-2026-110039: autorización incorrecta en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2026-110039

T−31d 14 oct. 2026
7,5 Alta

CVE-2026-81285: consumo de recursos sin control en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2026-81285

T−79d 27 ago. 2026
7,2 Alta

CVE-2026-19223: inyección de código en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2026-19223

T−79d 27 ago. 2026
2,7 Baja

CVE-2025-22288: recorrido de rutas (path traversal) en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2025-22288

T−595d 29 mar. 2025
4,3 Media

CVE-2023-3352: falta de autorización en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2023-3352

T−877d 20 jun. 2024
4,4 Media

CVE-2022-1009: cross-site scripting (XSS) en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2022-1009

T−1656d 3 may. 2022
8,8 Alta

Deserialización de datos no fiables en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

T−2896d 10 dic. 2018
9,8 Crít.

Cross-site scripting (XSS) en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

T−2896d 10 dic. 2018
5,3 Media

CVE-2017-15079: recorrido de rutas (path traversal) en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

CVE-2017-15079

T−3341d 21 sept. 2017