WordPress Speed Optimizer plugin <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Image Tag Attributes vulnerability discovered by stealthcopter in WordPress Plugin Speed Optimizer versions = 7.8.0...

WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Speed Optimizer versions = 7.4.6...

WordPress Speed Optimizer Plugin <= 7.4.6 is vulnerable to Broken Access Control

Software Speed Optimizer Type Plugin Vulnerable versions = 7.4.6 Fixed in 7.5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32532 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4bd495bc61aa Credits Rafie Muhammad Patchstack...