ImageBoss – Image Optimization & CDN
ImageBoss – Image Optimization & CDN has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for ImageBoss – Image Optimization & CDN has a vendor fix available, so running the current release closes it.
All of these findings were reported by Chevon Phillip. ImageBoss – Image Optimization & CDN is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2021-24888ImageBoss – Images Up To 60% Smaller & CDN < 3.0.6 - Cross-Site Scripting
Read the full analysisVulnerability Records

ImageBoss – Image Optimization & CDN
Author
igorescobar
Plugin Features WooCommerce Compatible. Compression, CDN and Progressive Scans to all your images automatically. Free Bandwidth included in your plan. Retina Displays Support. Lazy loading. API Features Content aware image resizing, cropping, compression, cache and CDN. All web development practices, hassle free in one simple and powerful API. Content Aware Image Cropping. Image compression. Lazy loading. WebP Detection. Face Detection. Animated GIFs. Progressive Scans. Image CDN. Image Filters. Watermarking. Your WordPress Themes are now even more powerful and flexible. External Service This plugin connects to the ImageBoss image optimization service to process and deliver your images. What is ImageBoss? ImageBoss is an external image optimization and CDN service that processes your images on-the-fly. When activated, this plugin rewrites your image URLs to route them through ImageBoss servers, which then optimize and deliver your images. Data Sent to ImageBoss When this plugin is active, your image URLs are transformed to be served through ImageBoss. This means: * Your original image URLs are sent to ImageBoss servers * ImageBoss fetches, optimizes, and caches your images * Optimized images are delivered to your visitors via the ImageBoss CDN Account Required To use this plugin, you need an ImageBoss account. By using this plugin, you agree to the ImageBoss Terms of Service and Privacy Policy. Service Links Service: https://imageboss.me/ Terms of Service: https://imageboss.me/legal/terms Privacy Policy: https://imageboss.me/legal/privacy Third-Party Libraries This plugin includes the following third-party JavaScript libraries in minified form: ImageBoss Web Version: 5.1.4 Source Code: https://github.com/imageboss/imageboss-web License: MIT File: public/js/imageboss-web-5.1.4.min.js LazySizes Version: 5.3.2 Source Code: https://github.com/aFarkas/lazysizes License: MIT File: public/js/lazysizes.min.js
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C