CVE-2026-39471

35th percentile - higher than 35% of all known CVEs

Versions of ShortPixel Image Optimizer up to 6.4.3 are vulnerable to PHP Object Injection attacks, potentially leading to unauthorized system access.

An attacker could exploit this vulnerability to inject malicious code, posing a serious threat to application security and user data.

It is recommended to update ShortPixel Image Optimizer to the latest version to mitigate this vulnerability.