Skip to content
OpenAdvisories

Vendor

sh1zen

6 known vulnerabilities.

Products

Multi Uploader for Gravity Forms 4 WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals 1 WP Optimizer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-6295

    WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter

    The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parse_key_compare_field() method that, when the user-supplie…

    sh1zen WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals Web / CMS