6.8
Medium
CVE-2026-110651 The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it…
Description
The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Swift Performance Lite 2.3 | earliest → < 2.3.7.4 | 2.3.7.4 |