cleantalk
Vulnerabilities and Security Researches

Smush – Optimize, Compress and Lazy Load Images, PSC-2026-64676

PSC, Research URL

PSC-2026-64676

Published on
Jul 28, 2026
Research Description
Image optimization plugins process files that become part of nearly every public page. Compression, format conversion, lazy loading, and CDN delivery all need careful handling of uploads, metadata, and generated URLs. Smush - Image Optimization, Compression, Lazy Load, WebP & CDN version 4.2.0 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64676, confirming that the plugin was reviewed from a secure code perspective with attention to image processing inputs, media permissions, generated formats, remote delivery settings, and public markup.
Affected versions
Min 4.3.3, max 4.3.3.
Status
SAFE & CERTIFIED