Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-110651

Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Swift Performance Lite

Default version status: unaffected

  • 0 to < 2.3.7.4affected

References