| CVE-2026-91049 |
EWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load Attribute
|
6.4
Moyenne
|
5 nov. 2026 |
| CVE-2026-91051 |
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not prevent authenticated users with author-level…
|
6.6
Moyenne
|
30 sept. 2026 |
| CVE-2026-91072 |
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to…
|
4.4
Moyenne
|
30 sept. 2026 |
| CVE-2026-91011 |
The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it…
|
6.8
Moyenne
|
17 sept. 2026 |