Medium 4.1
2025-11-06< 3.17.1
CVE-2025-22288
Minimum safe version
3.17.1
Update to 3.17.1 or later to address 9 fixable vulnerabilities
CVE-2025-22288
CVE-2023-3352
Smush Image Compression and Optimization <= 2.9.1 - Authenticated Phar Deserialization
Smush – Lazy Load Images, Optimize & Compress Images <= 2.9.1 - Cross-Site Scripting
Smush – Lazy Load Images, Optimize & Compress Images <= 3.0.0 - Authenticated PHAR Deserialization
WordPress Smush Image Compression and Optimization plugin <=2.7.5 - File Traversal vulnerability
WordPress Smush Image Compression and Optimization plugin <= 2.9.1 - Authenticated XSS & Phar Deserialization vulnerabilities
CVE-2022-1009
CVE-2017-15079