CVE-2025-3951

The WP-Optimize WordPress plugin versions prior to 4.2.0 is vulnerable to SQL Injection due to improper escaping of user input when checking image compression statuses. This vulnerability specifically impacts Multi-Site WordPress configurations and requires administrator role privileges to exploi...

CVE-2023-1119

The WP-Optimize WordPress plugin (versions prior to 3.2.13 ) and the SrbTransLatin WordPress plugin (versions prior to 2.4.1 ) are vulnerable to Cross-Site Scripting (XSS) . The root cause is a third-party library that improperly handles HTML character escaping, removing necessary protections. Th...