CVE-2026-56066

MEDIUM5.8JSON export Create alert

Description

Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

Low

Affected products

shortpixel / ShortPixel Adaptive Imagesn/a – 3.11.4

References

MISChttps://patchstack.com/database/wordpress/plugin/shortpixel-adaptive-images/vulnerability/wordpress-shortpixel-adaptive-images-plugin-3-11-5-non-arbitrary-file-deletion-vulnerability?_s_id=cve