How many vulnerabilities does ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF have?

The audit found 388 findings: 0 critical, 111 high, 58 medium severity.

ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF

Q: Is ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF secure?

WP HealthKit's independent audit rates ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF overall risk as HIGH with a report-card grade of B.

Q: Should I use ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF?

Based on the latest audit (grade B, risk HIGH), review the 388 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

v6.5.2WordPress Plugin300K+ installs4.5Audited 116 days ago

HIGH

Total Findings

388

Security Grade

Active Installs

300K+

Coding Score

100/100

Security Findings

388

Critical0

High111

Medium58

Low27

Info192

Executive Summary

Is ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF secure? In WP HealthKit's independent 2026 audit, ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF received an overall risk of HIGH and a report-card grade of B across 388 findings (0 critical, 111 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.1

Categories with Findings

PHP CompatibilityPerformanceInternationalizationDatabaseType SafetyWordPress CompatibilityWooCommerce CompatibilityMalware & Nulled PluginHook WiringPlugin Conflicts

Plugin Info

Active Installs: 300K+
WP.org Rating: 4.5
Requires WP: 4.8.0+
Tested Up To: 7.0
Requires PHP: 7.4+
Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/shortpixel-image-optimiser)](https://wphealthkit.com/directory/shortpixel-image-optimiser)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin