CVE-2025-3951

CVE-2025-3951 affects the WP-Optimize WordPress plugin prior to version 4.2.0. The issue is improper escaping of user input when checking image compression statuses, which could enable users with the administrator role in Multi-Site WordPress configurations to perform SQL Injection attacks. Publi...

CVE-2023-1119

The CVE-2023-1119 issue affects WordPress plugins WP-Optimize (before 3.2.13) and SrbTransLatin (before 2.4.1). Affected component is a third-party library that fails to escape certain HTML characters, leading to cross-site scripting (XSS). Public sources describe unauthenticated attacker access ...