Skip to content
Threat Feed
Subscribe

Vendor

ShortPixel

1 brief RSS
high advisory

CVE-2026-17086 PHP Object Injection in ShortPixel Image Optimizer

Authenticated attackers can exploit insecure deserialization in ShortPixel Image Optimizer versions 6.5.5 and below to execute arbitrary code if a POP chain is available via other plugins or themes.

ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF wordpress vulnerability php-injection deserialization
1t 1c