🚨 VULNERABILITY UPDATE

Your Images are Fast, but is your Data Leaking?

Yesterday, a critical vulnerability (CVE-2026-1246) was disclosed in the ShortPixel Image Optimizer plugin (versions ≤ 6.4.2).

The Risk: Attackers can exploit a "Directory Traversal" flaw to download arbitrary files from your server. This isn't just a "bug" - it's a massive data leak.

What they can steal:

Your wp-config.php (giving hackers your database passwords).

System logs and sensitive .env files.

Backup archives left in your web root.

The WebHostMost Defense:

LiteSpeed Layer: Our server-level security rules have already been updated to block the specific request patterns used in this exploit.

⚠️ Update Now: We strongly recommend all users update to version 6.4.3 immediately.

On WebHostMost, your account is isolated by CloudLinux LVE, but a patched plugin is your best friend. Don't wait.

#WordPress #Security #ShortPixel #WebDev #WebHostMost