sh1zen WP Optimizer vulnerabilities

Latest sh1zen WP Optimizer CVEs

Newest publication first

1. CVE-2025-53314 WordPress WP Optimizer plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2025-06-27

   Critical·CVSS 9.6 EPSS 0.17%

   Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer wp-optimizer allows SQL Injection.This issue affects WP Optimizer: from n/a through <= 2.5.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.