| CVE-2026-91049 |
EWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load Attribute
|
6.4
Medium
|
Nov 5, 2026 |
| CVE-2026-91051 |
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not prevent authenticated users with author-level…
|
6.6
Medium
|
Sep 30, 2026 |
| CVE-2026-91072 |
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to…
|
4.4
Medium
|
Sep 30, 2026 |
| CVE-2026-91011 |
The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it…
|
6.8
Medium
|
Sep 17, 2026 |