Optimole (Unknown) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-07. Vendor: Unknown.

CVEs of Optimole

• CVE-2026-96530 - CVSS 6.5 (medium), 2026-10-07: The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard…
• CVE-2026-96531 - CVSS 6.8 (medium), 2026-09-26: The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-player block before rendering them onto the block's wrapper…
• CVE-2026-84829 - CVSS 8.8 (high), 2026-09-16: The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing…