ImageBoss – Image Optimization & CDN

ImageBoss – Image Optimization & CDN has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for ImageBoss – Image Optimization & CDN has a vendor fix available, so running the current release closes it.

All of these findings were reported by Chevon Phillip. ImageBoss – Image Optimization & CDN is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all ImageBoss – Image Optimization & CDN vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2021-24888

ImageBoss – Images Up To 60% Smaller & CDN < 3.0.6 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
ImageBoss – Image Optimization & CDN banner
Latestv5.0.3

ImageBoss – Image Optimization & CDN

igorescobar

Author

igorescobar

0.0(0)
0/100
Last Updated
2025-12-08 (9mo ago)
Active Installs
10+
Downloads
14,889
Requires WP
4.0+
Requires PHP
5.3.0+
Tested up to
WP 6.9.7
Created
2018-11-10 (8y ago)

Plugin Features WooCommerce Compatible. Compression, CDN and Progressive Scans to all your images automatically. Free Bandwidth included in your plan. Retina Displays Support. Lazy loading. API Features Content aware image resizing, cropping, compression, cache and CDN. All web development practices, hassle free in one simple and powerful API. Content Aware Image Cropping. Image compression. Lazy loading. WebP Detection. Face Detection. Animated GIFs. Progressive Scans. Image CDN. Image Filters. Watermarking. Your WordPress Themes are now even more powerful and flexible. External Service This plugin connects to the ImageBoss image optimization service to process and deliver your images. What is ImageBoss? ImageBoss is an external image optimization and CDN service that processes your images on-the-fly. When activated, this plugin rewrites your image URLs to route them through ImageBoss servers, which then optimize and deliver your images. Data Sent to ImageBoss When this plugin is active, your image URLs are transformed to be served through ImageBoss. This means: * Your original image URLs are sent to ImageBoss servers * ImageBoss fetches, optimizes, and caches your images * Optimized images are delivered to your visitors via the ImageBoss CDN Account Required To use this plugin, you need an ImageBoss account. By using this plugin, you agree to the ImageBoss Terms of Service and Privacy Policy. Service Links Service: https://imageboss.me/ Terms of Service: https://imageboss.me/legal/terms Privacy Policy: https://imageboss.me/legal/privacy Third-Party Libraries This plugin includes the following third-party JavaScript libraries in minified form: ImageBoss Web Version: 5.1.4 Source Code: https://github.com/imageboss/imageboss-web License: MIT File: public/js/imageboss-web-5.1.4.min.js LazySizes Version: 5.3.2 Source Code: https://github.com/aFarkas/lazysizes License: MIT File: public/js/lazysizes.min.js

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C