Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Speed Optimizer 7.8.5 Clear all filters
TI-2026-79568 CVE-2026-111738 · GHSA-vv9w-x7f3-8cfq

Incorrect authorization in Speed Optimizer allows network option changes

Priority LOW 25

The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site adminis…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.0028 Published 2026-10-23 Fixed in 7.8.5 CWE-863
TI-2026-79567 CVE-2026-111737 · GHSA-hhfq-xfxp-vh74

Stored cross-site scripting in Speed Optimizer WordPress plugin

Priority LOW 16

The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform S…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00185 Published 2026-10-23 Fixed in 7.8.5 CWE-79