Flying Images: Optimize and Lazy Load Images for Faster Page Speed

Flying Images: Optimize and Lazy Load Images for Faster Page Speed has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Flying Images: Optimize and Lazy Load Images for Faster Page Speed has a vendor fix available, so running the current release closes it.

All of these findings were reported by 0xsabre. Flying Images: Optimize and Lazy Load Images for Faster Page Speed is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Flying Images: Optimize and Lazy Load Images for Faster Page Speed vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2025-11927

Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.14 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-10-31 00:00	Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.14 - Authenticated (Admin+) Stored Cross-Site Scripting Flying Images <= 2.4.14	`CVE-2025-11927`	4.4 Medium	0xsabre	Yes

Showing 1–1 of 1 reports

Latestv2.4.15

Flying Images: Optimize and Lazy Load Images for Faster Page Speed

Author

Gijo Varghese

4.8(26)

96/100

Last Updated

2026-05-20 (4mo ago)

Active Installs

3,000+

Downloads

128,528

Requires WP

4.5+

Requires PHP

5.6+

Tested up to

WP 7.0.4

Created

2019-10-21 (7y ago)

The complete solution for image optimization Features Free Unlimited CDN – Flying Images uses Statically to provide free CDN. Statically is powered by Cloudflare (premium network), BunnyCDN, Fastly and CDN77. No hidden charges or upsell. On the fly Image Compression – Compress images on the fly via CDN. You can also set the desired quality needed. On the fly WebP conversion – Convert and deliver images as Webp via CDN if the browser supports it. Responsive/Adaptive Images – Creates srcset to deliver resized images based on device. Supports external images too. Native/JavaScript lazy loading – Load images using the browser’s native lazy loading if available (currently supported in Chrome) or via JavaScript. JavaScript only lazy load is also available. Also supports lazy loading inlined background images. Tiny JavaScript – Only 0.7KB, gzipped, minified. Rewrites entire HTML – Never miss an image from lazy loading or adding CDN, even the ones injected by gallery plugins. Support Official Support Forum Facebook Group Our premium products FlyingPress FlyingCDN Our free plugins Flying Pages Flying Images Flying Scripts Flying Analytics Flying Fonts

View on WordPress.org