CVE-2026-3220: Improper Neutralization of Input During Web Page Generation

The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing ...

PT-2026-41636

The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing ...

CVE-2025-13377: Improper Limitation of a Pathname to a Restricted Directory

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...

EUVD-2024-30334

Malicious code in bioql PyPI...

CVE-2024-32532

Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6...

CVE-2024-32532

Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6...

CVE-2024-32532

CVE-2024-32532 is a Missing Authorization vulnerability in the SiteGround Speed Optimizer (WordPress SG CachePress plugin), affecting Speed Optimizer up to version 7.4.6. The connected RH entry and CVE record confirm a Missing Authorization issue, but the provided documents do not disclose the ex...

CVE-2024-32532 WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6...

CVE-2024-32532 WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6...

CVE-2024-32532: Missing Authorization

Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6...

WordPress Plugin Speed Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...

WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Speed Optimizer versions = 7.4.6...

PT-2024-24652

Name of the Vulnerable Software and Affected Versions SiteGround Speed Optimizer versions 7.4.6 and earlier Description The issue is related to a Missing Authorization vulnerability in the SiteGround Speed Optimizer. Recommendations For versions 7.4.6 and earlier, update to a version later than...

WordPress Speed Optimizer Plugin <= 7.4.6 is vulnerable to Broken Access Control

Software Speed Optimizer Type Plugin Vulnerable versions = 7.4.6 Fixed in 7.5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32532 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4bd495bc61aa Credits Rafie Muhammad Patchstack...

WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Plugin <= 2.24.14 is vulnerable to Settings Change

Software 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Type Plugin Vulnerable versions = 2.24.14 Fixed in 2.24.18 OWASP Top 10 A3: Injection Classification Settings Change CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 75375faf9c46...

Krisp: SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.ai

The tenweb-speed-optimizer WordPress plugin prior to version 2.12.22 was vulnerable to unauthenticated SQL injection in /wp-json/tenwebio/v2/compress-one, which could be exploited to gain remote code execution by chaining it with insecure deserialization...