CVE-2025-12190

Name of the Vulnerable Software and Affected Versions The Image Optimizer by wps.sk versions prior to 1.2.1

Description The Image Optimizer plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by insufficient nonce validation within the imagopby ajax optimize gallery() function. An unauthenticated attacker could potentially trigger bulk optimization by deceiving a site administrator into performing an action.

Recommendations Update The Image Optimizer plugin to version 1.2.1 or later.