Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting

Image Optimizer by 10web before 1.0.26 is susceptible to cross-site scripting via the iowdtabsactive parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can...

CVE-2026-101177

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101177

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101177

A permission control vulnerability exists in the Optimizer module , which may affect service confidentiality. The vulnerability is associated with CWE-264 . No specific software version, root cause, or remediation details are provided in the documents. No exploits or scanner source code are avail...

EUVD-2026-115086

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101177: Huawei: Permission control vulnerability in the Optimizer module

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-135352

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-25163

CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Authenticated Subscriber+ Arbitrary File Download Description The Plugin A/B Image Optimizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3. This makes it possible for authenticated attackers,...

CVE-2025-25163-Nuclei-Template

Nuclei Template for CVE-2025-25163 🚀 Overview This repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability CVE-2025-25163 in the Plugin A/B Image Optimizer for WordPress. This vulnerability poses a critical security risk, allowing unauthorized access...

CLEANSTART-2026-TY07253 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Security vulnerability affects the mariadb package. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer...

CVE-2023-40600

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log Description The EWWW Image Optimizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.0 via the debuglog function. This makes it...

CVE-2026-118185

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over the account...

EUVD-2026-114584

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over the account...

CVE-2026-118185 Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over the account...

CVE-2026-118185

The Security Optimizer WordPress plugin (versions before 1.6.9 ) is vulnerable to a 2FA bypass due to a missing rate limit on two-factor authentication codes. An attacker who possesses a user's password can brute force the second factor to gain unauthorized account access. No specific exploit det...

CVE-2026-31891

SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw Vulnerability Class : SQL Injection CWE-89 Product : Cockpit CMS Core Edition Affected Version : 2.13.4 and likely all versions since the Aggregation Optimizer was introduced Docker Image Tested : cockpithq/cockpit:core-2.13.4...

CVE-2026-118185: Unknown Security Optimizer: The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that…

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over the account...

CLEANSTART-2025-XE15594 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Security vulnerability affects the postgresql15 package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-101620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...