Wp Optimizer Pagespeed Cache Minify Core Web Vitals
Monthly
SQL injection in WP Optimizer up to and including 2.5.0 allows authenticated administrator-level users to inject arbitrary SQL subqueries through the 's' parameter, enabling extraction of sensitive database information via time-based blind techniques. The flaw is rated CVSS 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and its real-world priority is limited because the attacker must already hold WordPress administrator privileges, which already convey broad database access. No public exploit was identified at time of analysis, and no CISA KEV entry is present.
SQL injection in WP Optimizer up to and including 2.5.0 allows authenticated administrator-level users to inject arbitrary SQL subqueries through the 's' parameter, enabling extraction of sensitive database information via time-based blind techniques. The flaw is rated CVSS 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and its real-world priority is limited because the attacker must already hold WordPress administrator privileges, which already convey broad database access. No public exploit was identified at time of analysis, and no CISA KEV entry is present.