CVE-2025-22288: Wpmu Dev - Your All-In-One WordPress Platform Smush Image Compression And Optimization

Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.

Affected products

• Wpmu Dev - Your All-In-One WordPress Platform Smush Image Compression And Optimization: up to and including 3.17.0

Published 2025-11-06. Last modified 2026-10-07.