Skip to content
OpenAdvisories

Product · sh1zen

WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-6295

    WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter

    The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parse_key_compare_field() method that, when the user-supplie…

    sh1zen WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals Web / CMS