WordPress WP-Optimize plugin < 4.2.0 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Francisco Alisson in WordPress Plugin WP-Optimize versions 4.2.0...

CVE-2025-3951

The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to conduct SQL Injection attacks in the context of Multi-Site WordPress configurations...

CVE-2025-3951 WP-Optimize < 4.2.0 - Admin+ SQLi

The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to conduct SQL Injection attacks in the context of Multi-Site WordPress configurations...

CVE-2025-3951

The WP-Optimize WordPress plugin versions prior to 4.2.0 is vulnerable to SQL Injection due to improper escaping of user input when checking image compression statuses. This vulnerability specifically impacts Multi-Site WordPress configurations and requires administrator role privileges to exploi...