CVE-2026-110651
CVE-2026-110651 · Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.
CVSS 6.8 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
swift performance lite
- Versions
- ≥ 0, < 2.3.7.4: Affected (semver)
Update to 2.3.7.4