Now officially on WordPress.org

CVE Database / CVE-2026-25387

CVE · Medium

CVE-2026-25387 — Image Optimization – Compress Images and Convert to WebP or AVIF [image-optimization] < 1.7.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-25387 Image Optimization – Compress Images and Convert to WebP or AVIF [image-optimization] < 1.7.2 Missing Authorization Medium 4.3 < 1.7.2 1.7.2 2026-02-19 —

CVE-2026-25387

Authenticated users with access levels of at least subscriber can exploit a security flaw in the Image Optimizer by Elementor plugin for WordPress, which affects versions up to and including 1.7.1. The issue stems from a lack of capability checks on certain functions within the plugin. This vulnerability allows unauthorized actions to be performed.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings