CVE-2025-11378 | ShortPixel Image Optimizer Plugin up to 6.3.4 on WordPress Setting shortpixel_ajaxRequest privilege escalation

A vulnerability labeled as critical has been found in ShortPixel Image Optimizer Plugin up to 6.3.4 on WordPress. The impacted element is the function shortpixel_ajaxRequest of the component Setting Handler. Such manipulation leads to privilege escalation.

This vulnerability is referenced as CVE-2025-11378. It is possible to launch the attack remotely. No exploit is available.