TI-2026-75139 CVE-2026-104769 · GHSA-f629-5hcg-m2mf
Path traversal in Debloat WordPress plugin lets attackers read files
Priority LOW 28
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter.