CVE-2022-29417

MEDIUM 4.3CVE-2022-29417 · Published 25/04/2022 · updated 17/06/2026

In short

CVE-2022-29417 is a MEDIUM (CVSS 4.3) vulnerability affecting shortpixel adaptive images (shortpixel).
Chance of exploitation in the next 30 days (EPSS): 0.63%, higher than 50.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
shortpixel adaptive images shortpixel	`≤ 3.3.1`	No fix yet

Description

Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.

References

patchstack.com/database/vulnerability/shortpixel-adaptive-images/wordpress-shortpixel-adaptive-images-plugin-3-3-1-subscriber-plugin-settings-update-vulnerability · Release Notes
wordpress.org/plugins/shortpixel-adaptive-images · Release Notes

More vulnerabilities in shortpixel adaptive images

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free