Vulnerabilities / ThumbPress
ThumbPress vulnerabilities
Advisories WPSec published for ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More. Other sources may list more. Its attack surface: ThumbPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1326 | ThumbPress <= 6.9.1 - Authenticated (Contributor+) PHP Object Injection via Post Content and Post Meta | High 7.1 | 6.10.0 |
License: CC BY 4.0