UpHeron
All vulnerabilities

WordPress plugins

CVE-2025-3951

WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance: SQL Injection

Severity
Medium 4.1
Published
12 May 2025
Added to UpHeron
21 Oct 2026
Fixed in
4.2.0
Also known as
EUVD-2025-16607, WPV-a804a1cf3515
Sources
WPVulnerability

Affected software

SoftwareAffected versions
WP Optimize (WordPress plugin)WordPress plugins · wp-plugin:wp-optimize
  • Every version before 4.2.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-3951
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-optimize/wp-optimize-411-authenticated-admin-sql-injection