Skip to content
PluginCanary

Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

by Optimole · 200,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 5 Oct 2026, fixed in 4.2.15.

83/ 100 Canary Score
Sub-scores for Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.2.15. Update to version 4.2.15 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 4.2.15. Update to version 4.2.15 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 4.2.13. Update to version 4.2.13 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.2.12. Update to version 4.2.12 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 27 Aug 2026, fixed in 4.2.11. Update to version 4.2.11 or later.27 Aug 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
optimole23 Sep 2018 to 2 Nov 2026, 253 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
34
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
Q1 20245
Q2 20248
Q3 20244
Q4 20242
Q1 20252
Q2 20254
Q3 20251
Q4 20256
Q1 20263
Q2 20266
Q3 20267
Q4 20263

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026Optimole 4.0.0 - 4.2.14 - Authenticated (Subscriber+) Information Exposure4.34.0.0 to 4.2.144.2.150
30 Sep 2026Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.14 - Missing Authorization4.3<= 4.2.144.2.150
24 Sep 2026Optimole 4.0.0 - 4.2.12 - Authenticated (Author+) Stored Cross-Site Scripting6.44.0.0 to 4.2.124.2.130
14 Sep 2026Optimole <= 4.2.11 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.2.114.2.120
27 Aug 2026Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter7.2<= 4.2.104.2.110
30 Jun 2026Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.7 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.2.74.2.80
17 Jun 2026Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action4.3<= 4.2.64.2.70
10 Apr 2026Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter7.2<= 4.2.24.2.30
10 Apr 2026Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL6.1<= 4.2.34.2.40
17 Oct 2025Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload4.3<= 4.1.04.1.10
14 May 2024Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload6.4<= 3.12.103.13.00
1 Feb 2024ThemeIsle SDK <= Various Versions - Missing Authorization5.3<= 3.12.43.12.513
21 Mar 2022Image optimization & Lazy Load <= 3.3.1 - Admin+ Stored Cross-Site Scripting4.8< 3.3.23.3.20

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
Q2 20254.0
Q3 20253.7
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating rose from 4.0 to 5.0 between Q2 2025 and Q3 2026.

Rating distribution
5 star576
4 star18
3 star7
2 star4
1 star35
Latest low reviews

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization
4 May 202677,520
11 May 202617,705
18 May 202697,983
25 May 202615,287
1 Jun 202610,589
8 Jun 20269,072
15 Jun 202684,642
22 Jun 202682,552
29 Jun 202622,996
6 Jul 202699,446
13 Jul 202694,538
20 Jul 202617,770
27 Jul 202612,436
3 Aug 20269,976
10 Aug 20267,902
17 Aug 20267,801
24 Aug 202683,698
31 Aug 202618,126
7 Sep 202682,351
14 Sep 202694,836
21 Sep 202699,527
28 Sep 2026146,339
5 Oct 202627,290
12 Oct 20269,009
19 Oct 202685,007
26 Oct 202623,116
2 Nov 20261,762

Weekly downloads over the last 4 weeks are 40% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Modern Image FormatsScore 93 · 100,000+CompressX - AVIF & WebP Converter, Media ReplacementScore 93 · 40,000+Cimo - Free Instant Image Optimizer & WebP ConverterScore 93 · 10,000+Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIFScore 92 · 900,000+reSmush.it : The original free image compressor and optimizer pluginScore 92 · 100,000+

Facts

Version4.2.18
AuthorOptimole
Added23 Sep 2018
Last updated2 Nov 2026
Active installs200,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.4
CategoryPerformance & Optimization > Image Optimization & Compression
TagsAVIF, webp, compress images, optimize images, image optimization

Other plugins by this author: Super Page Cache - Cloudflare Cache, Page Speed & Core Web Vitals

Questions

Is Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization still maintained?

Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization safe?

Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization?

The wordpress.org author is Optimole. Recent committers: optimole, plugin-master. We have recorded no ownership change.

What can I use instead of Optimole - Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization?

Plugins in the same category with a higher Canary Score: Modern Image Formats, CompressX - AVIF & WebP Converter, Media Replacement, Cimo - Free Instant Image Optimizer & WebP Converter, Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF, reSmush.it : The original free image compressor and optimizer plugin.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue