WordPress plugin
Speed Optimizer – The All-In-One Performance-Boosting Plugin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium3
- Low1
All Speed Optimizer – The All-In-One Performance-Boosting Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting <7.8.5Update to 7.8.5 | CVE-2026-111737 | |
| Low2.7 | Missing Authorization <7.8.5Update to 7.8.5 | CVE-2026-111738 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes ≤7.8.0Update to 7.8.1 | CVE-2026-15421 | |
| Medium5.3 | Missing Authorization via purge_on_other_events() ≤7.4.6Update to 7.5.0 | CVE-2024-32532 | |
| Critical9.8 | Missing Authorization <5.0.13Update to 5.0.13 | CVE-2019-25217 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
<7.8.5Update to 7.8.5
- Low2.7Missing Authorization
<7.8.5Update to 7.8.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes
≤7.8.0Update to 7.8.1
- Medium5.3Missing Authorization via purge_on_other_events()
≤7.4.6Update to 7.5.0
- Critical9.8Missing Authorization
<5.0.13Update to 5.0.13
Speed Optimizer – The All-In-One Performance-Boosting Plugin: common questions
Does Speed Optimizer – The All-In-One Performance-Boosting Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Speed Optimizer – The All-In-One Performance-Boosting Plugin: 1 critical, 3 medium, 1 low. None are known to affect version null.
How do I check which version of Speed Optimizer – The All-In-One Performance-Boosting Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Speed Optimizer – The All-In-One Performance-Boosting Plugin vulnerability?
CVE-2026-111737, published Oct 23, 2026: Speed Optimizer – The All-In-One Performance-Boosting Plugin < 7.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any Speed Optimizer – The All-In-One Performance-Boosting Plugin vulnerability listed in CISA KEV?
No. None of the known Speed Optimizer – The All-In-One Performance-Boosting Plugin vulnerabilities is currently listed in the CISA KEV catalog.