CVE-2026-77365

The Optimole plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping in the 'a' (above_fold_images) parameter, affecting all versions up to 4.2.10. This vulnerability allows unauthenticated attackers to inject malicious scripts into web pages, which can execute when users visit the compromised pages. WordPress site administrators using this plugin should prioritize patching to mitigate potential exploitation risks.