WordPress Smush Vulnerabilities

Wordpress Smush vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

27 August 2026

Arbitrary Code Execution Vulnerability in Smush Plugin for WordPress
CVE-2026-19223
WordPressSmush👾🟡

6 November 2025

Path Traversal Vulnerability in WPMU DEV Smush Image Compression and Optimization
CVE-2025-22288
WordPressSmush Image Compressio...4.1MEDIUM

21 June 2024

Unauthorized Deletion of Resmush List in Smush Plugin for WordPress
CVE-2023-3352
WordPressSmush – Image Optimiza...4.3MEDIUM

30 May 2022

Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting
CVE-2022-1009
WordpressSmush – Lazy Load Imag...6.1MEDIUM

6 October 2017

Directory Traversal in Smush Image Compression Plugin for WordPress
CVE-2017-15079
WordpressSmush Image Compressio...7.5HIGH