Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-07
Smush Image Compression and Optimization - Security Vulnerability (CVE-2026-120845)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Smush Image Compression and Optimization wp-smushit allows Stored XSS.This issue affects Smush Image Compression and Optimization: from n/a through 4.3.5.
PLUGIN
Smush Image Compression and Optimization
CVE-2026-120845
Risk Score
Threat Entry
Updated 2026-08-28
Smush Image Compression and Optimization - Denial of Service (CVE-2026-81285)
Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization
PLUGIN
Smush Image Compression and Optimization
CVE-2026-81285
Risk Score
Threat Entry
Updated 2026-06-17
Smush Image Compression And Optimization - Cross-Site Scripting (XSS) (CVE-2022-1009)
The Smush WordPress plugin before 3.9.9 does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious configuration file
PLUGIN
Smush Image Compression And Optimization
CVE-2022-1009
Risk Score
Threat Entry
Updated 2026-06-17
Smush Image Compression And Optimization - Path Traversal (CVE-2017-15079)
The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.
PLUGIN
Smush Image Compression And Optimization
CVE-2017-15079
Risk Score