QuickWebP – WebP & AVIF Image Optimizer, Compression & SEO for WordPress
QuickWebP – WebP & AVIF Image Optimizer, Compression & SEO for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Path Traversal, behind 1 of the records (100%).
The one issue recorded for QuickWebP – WebP & AVIF Image Optimizer, Compression & SEO for WordPress has a vendor fix available, so running the current release closes it.
All of these findings were reported by dodoh4t. QuickWebP – WebP & AVIF Image Optimizer, Compression & SEO for WordPress is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-42756QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly <= 3.2.7 - Authenticated (Contributor+) Arbitrary File Deletion
Read the full analysisVulnerability Records
QuickWebP – WebP & AVIF Image Optimizer, Compression & SEO for WordPress
Author
Ludwig You
QuickWebP helps you optimize images in WordPress as soon as they are uploaded. It converts JPG and PNG files to WebP, compresses them locally without any external API, cleans filenames for better image SEO, pre-fills media metadata, and resizes oversized uploads automatically. If you want even smaller next-generation images, QuickWebP Pro adds AVIF conversion for supported servers. It is designed for faster pages, better Core Web Vitals, and a simpler image workflow inside the WordPress media library. QuickWebP Free vs Pro QuickWebP Free includes Automatic WebP conversion on upload Local image compression without any external API SEO-friendly filename cleanup Automatic image metadata pre-fill for alt text, caption, description, legend, and title Automatic resize with maximum width and height controls Choice between GD and Imagick when available Bulk optimization for older media when originals are preserved Clipboard paste support inside the WordPress media frame Optimization preview inside the settings screen ⭐️ QuickWebP Pro includes ⭐️ Everything included in QuickWebP Free AVIF conversion for supported servers with PHP 8.1+ Smaller files than JPG, PNG, and typically smaller than WebP 🚀 Unlock AVIF conversion and more with QuickWebP Pro: Upgrade now Important QuickWebP is also available inside WPMasterToolKit. If you prefer an all-in-one toolkit, install WPMasterToolKit and enable the Media Encoder module. If you want the dedicated QuickWebP experience and access to AVIF, discover QuickWebP Pro. Why site owners use QuickWebP Improve WordPress performance with lighter images Reduce page weight to help Core Web Vitals Keep image SEO cleaner with optimized filenames and metadata Convert and compress images directly on your server Manage image optimization from one simple settings page Demos How to install QuickWebP Paste a picture from the clipboard into WordPress media More from Webdeclic QuickWebP is developed by Webdeclic. If you want a broader WordPress toolbox, also check Webdeclic plugins. Support If you like QuickWebP, please leave a 5-star review on WordPress.org. If you want to support the project, you can do it here: Buy me a coffee
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C