wp_optimizer_pagespeed_cache_minify_core_web_vitals vulnerabilities

CVEs whose affected-version data names the wp_optimizer_pagespeed_cache_minify_core_web_vitals package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-6295Medium· 4.9

3d ago

The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0

The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parse_key_compare_field() method that,…

▾ Sunlitsh1zen · WP Optimizer – PageSpeed, Cache, Minify & Core Web VitalsEPSS 0.30%via NVD