← All advisories

Unrated severityNVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability

CVE-2026-56066

Description

Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions.

Affected products

2

WordPress/Shortpixel Adaptive Imagesinferred2 versions
<=3.11.4+ 1 more
- (no CPE)range: <=3.11.4
- (no CPE)range: <=3.11.4
Package: https://wordpress.org/plugins/shortpixel-adaptive-images

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/shortpixel-adaptive-images/vulnerability/wordpress-shortpixel-adaptive-images-plugin-3-11-5-non-arbitrary-file-deletion-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.