WordPress plugin
RapidLoad AI – Optimize Web Vitals Automatically security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 20 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium17
- Low0
All RapidLoad AI – Optimize Web Vitals Automatically vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤2.4.4Update to 2.4.5 | CVE-2025-22665 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Limited Setting Reset ≤2.4.4Update to 2.4.5 | CVE-2024-13651 | |
| High7.1 | Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification and SQL Injection ≤2.4.2Update to 2.4.3 | CVE-2024-11840 | |
| High7.2 | Unauthenticated Server-Side Request Forgery ≤2.2.11Update to 2.2.12 | CVE-2024-31288 | |
| Medium6.3 | Cross-Site Request Forgery ≤1.7.1Update to 1.7.2 | CVE-2023-1472 | |
| Medium4.3 | Cross-Site Request Forgery via 'clear_uucss_logs' ≤1.7.1Update to 1.7.2 | CVE-2023-1340 | |
| Medium4.3 | Cross-Site Request Forgery via 'ucss_connect' ≤1.7.1Update to 1.7.2 | CVE-2023-1342 | |
| Medium4.3 | Missing Authorization in 'clear_uucss_logs' ≤1.7.1Update to 1.7.2 | CVE-2023-1337 | |
| Medium4.3 | Cross-Site Request Forgery via 'clear_page_cache' ≤1.7.1Update to 1.7.2 | CVE-2023-1346 | |
| Medium4.3 | Missing Authorization in 'ajax_deactivate' ≤1.7.1Update to 1.7.2 | CVE-2023-1336 | |
| Medium4.3 | Cross-Site Request Forgery via 'queue_posts' ≤1.7.1Update to 1.7.2 | CVE-2023-1345 | |
| Medium4.3 | Cross-Site Request Forgery via 'ajax_deactivate' ≤1.7.1Update to 1.7.2 | CVE-2023-1341 | |
| Medium4.3 | Missing Authorization in 'queue_posts' ≤1.7.1Update to 1.7.2 | CVE-2023-1334 | |
| Medium4.3 | Missing Authorization in 'uucss_update_rule' ≤1.7.1Update to 1.7.2 | CVE-2023-1339 | |
| Medium4.3 | Missing Authorization in 'attach_rule' ≤1.7.1Update to 1.7.2 | CVE-2023-1338 | |
| Medium4.3 | Cross-Site Request Forgery via 'uucss_update_rule' ≤1.7.1Update to 1.7.2 | CVE-2023-1344 | |
| Medium4.3 | Missing Authorization in 'clear_page_cache' ≤1.7.1Update to 1.7.2 | CVE-2023-1333 | |
| Medium4.3 | Cross-Site Request Forgery via 'attach_rule' ≤1.7.1Update to 1.7.2 | CVE-2023-1343 | |
| Medium4.3 | Missing Authorization in 'ucss_connect' ≤1.7.1Update to 1.7.2 | CVE-2023-1335 | |
| High7.2 | Authenticated (Subscriber+) SQL Injection ≤1.6.35Update to 1.6.36 | CVE-2022-47593 |
- Medium4.3Missing Authorization
≤2.4.4Update to 2.4.5
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Limited Setting Reset
≤2.4.4Update to 2.4.5
- High7.1Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification and SQL Injection
≤2.4.2Update to 2.4.3
- High7.2Unauthenticated Server-Side Request Forgery
≤2.2.11Update to 2.2.12
- Medium6.3Cross-Site Request Forgery
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'clear_uucss_logs'
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'ucss_connect'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'clear_uucss_logs'
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'clear_page_cache'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'ajax_deactivate'
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'queue_posts'
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'ajax_deactivate'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'queue_posts'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'uucss_update_rule'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'attach_rule'
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'uucss_update_rule'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'clear_page_cache'
≤1.7.1Update to 1.7.2
- Medium4.3Cross-Site Request Forgery via 'attach_rule'
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization in 'ucss_connect'
≤1.7.1Update to 1.7.2
- High7.2Authenticated (Subscriber+) SQL Injection
≤1.6.35Update to 1.6.36
RapidLoad AI – Optimize Web Vitals Automatically: common questions
Does RapidLoad AI – Optimize Web Vitals Automatically have known vulnerabilities?
Yes. VulnCrest Radar lists 20 known vulnerabilities in RapidLoad AI – Optimize Web Vitals Automatically: 3 high, 17 medium. None are known to affect version null.
How do I check which version of RapidLoad AI – Optimize Web Vitals Automatically I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent RapidLoad AI – Optimize Web Vitals Automatically vulnerability?
CVE-2025-22665, published Feb 3, 2025: RapidLoad <= 2.4.4 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any RapidLoad AI – Optimize Web Vitals Automatically vulnerability listed in CISA KEV?
No. None of the known RapidLoad AI – Optimize Web Vitals Automatically vulnerabilities is currently listed in the CISA KEV catalog.