WordPress WP Optimizer Plugin Cross-Site Request Forgery Vulnerability Allowing SQL Injection
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress WP Optimizer plugin, specifically in versions through 2.3.6. This vulnerability allows for SQL Injection, as it could enable an attacker to manipulate SQL queries executed by the database.
Impact
Exploitation of this vulnerability could lead to SQL Injection, allowing attackers to interfere with the database queries of the application. This could result in unauthorized data access, data manipulation, or in some cases, executing administrative operations on the WordPress site.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.1exploitability
6.4remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
