Known vulnerabilities in GTmetrix for WordPress

GTmetrix can help you develop a faster, more efficient, and all-around improved website experience for your users. Your users will love you for it.

3Reported vulnerabilities

8.8Highest CVSS score

0.4.8Latest version

8,000+Active installs

What to do now

Update GTmetrix for WordPress to 0.4.8 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 25, 2023 / Tested up to WordPress: 6.0.14 / View on wordpress.org

This plugin has not been updated in over two years. New vulnerabilities may never be fixed. Consider an alternative.

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-37996	High 8.8	0.2%	Before 0.4.8	`0.4.8`	October 3, 2023
CVE-2023-32503	Medium 6.1	0.4%	0.4.6 and earlier	`0.4.7`	August 8, 2023
CVE-2023-23677	Medium 6.1	0.4%	Before 0.4.6	`0.4.6`	March 30, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.