CVE-2023-40600: Ewww Image Optimizer

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.

Affected products

• Ewww Image Optimizer: before 7.2.1 (fixed in 7.2.1)

Published 2023-11-30. Last modified 2026-06-17.