Vulnerabilities / Speed Optimizer
Speed Optimizer vulnerabilities
Advisories WPSec published for Speed Optimizer – The All-In-One Performance-Boosting Plugin. Other sources may list more. Its attack surface: Speed Optimizer on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1373 | Speed Optimizer <= 7.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via DNS Prefetch and Font Preload URLs | Medium 4.4 | 7.8.5 |
| 2026-10-21 | WPSEC-2026-1372 | Speed Optimizer <= 7.8.4 - Authenticated (Administrator+) Missing Authorization to Network Option Update via Enable/Disable Option REST Routes | Low 2.2 | 7.8.5 |
| 2026-10-02 | WPSEC-2026-0276 | Speed Optimizer <= 7.8.2 - Unauthenticated Sensitive Information Exposure via Forged Logged-In Cookie in File Cache | Medium 5.9 | 7.8.3 |
License: CC BY 4.0