WP Security CheckVulnerability data as of October 25, 2026

Vulnerability alerts / October 23, 2026

Vulnerability in Speed Optimizer – The All-In-One Performance-Boosting Plugin — CVE-2026-111738

LowSeverity
CVSS 2.7
0.2%Estimated exploit probability
EPSS
1,000,000+ sitesInstalls
7.8.5Fixed in

What to do now

Update Speed Optimizer – The All-In-One Performance-Boosting Plugin to 7.8.5 or later.

Affected versions

  • Everything before 7.8.5

Affected: Speed Optimizer – The All-In-One Performance-Boosting Plugin (plugin, sg-cachepress)

Check: The plugin on wordpress.org / Our record for Speed Optimizer – The All-In-One Performance-Boosting Plugin

What the vulnerability is

The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to 7.8.5. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with administrator-level access and above, to perform an unauthorized action.

This description is reproduced verbatim from the public vulnerability record.

Sources

Part of this record comes from Wordfence Intelligence. Original: https://www.wordfence.com/threat-intel/vulnerabilities/id/b27cd8ca-b892-4f91-990e-c6761cbf2c91
Copyright 2012-2026 Defiant Inc. / Full license text

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts