Smush – Optimize, Compress and Lazy Load Images, CVE-2025-22288

CVE, Research URL: CVE-2025-22288
Home page URL: Security reports for Smush – Optimize, Compress and Lazy Load Images
Application: Smush – Optimize, Compress and Lazy Load Images
Published on: Nov 06, 2025
Research Description: Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.
Affected versions: max 3.17.1.
Status: vulnerable

Smush &#8211; Optimize, Compress and Lazy Load Images, CVE-2025-22288