Skip to content
Sign in
4.1 Medium

CVE-2025-3951 The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression…

Description

The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to conduct SQL Injection attacks in the context of Multi-Site WordPress configurations.

Affected products and versions

Product Affected versions Fixed in
WP-Optimize 4.2 earliest → < 4.2.0 4.2.0

Other CVEs of WP-Optimize

The 2 CVEs of WP-Optimize →
CVE-2023-1119 The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library… 6.1 Medium
Track this CVE