CVE-2026-84773

Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.

Credits

bekitousei | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/ewww-image-optimizer/vulnerability/wordpress-ewww-image-optimizer-plugin-8-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve