Aller au contenu
Se connecter
3.5 Faible

CVE-2026-111737 The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting…

Description

The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup).

Produits et versions touchés

Produit Versions touchées Corrigé en
Speed Optimizer 7.8 premières → < 7.8.5 7.8.5

Autres CVE de Speed Optimizer

Les 3 CVE de Speed Optimizer →
CVE-2026-111738 The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option… 5.5 Moyenne CVE-2026-3220 The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress… 8.8 Élevée
Suivre cette CVE