WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WP EXtra – One Click Optimize

Optimize your site instantly with one-click activation. WP Extra offers easy fixes and features for WordPress.

4Reported vulnerabilities
8.8Highest CVSS score
8.6.8Latest version
6,000+Active installs

What to do now

Update WP EXtra – One Click Optimize to 6.3 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: April 20, 2026 / Tested up to WordPress: 7.0.0 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-5311 High 8.8 1.5% Before 6.3 6.3 October 25, 2023
CVE-2023-5314 Medium 4.3 0.4% 6.2 and earlier 6.3 November 22, 2023
CVE-2023-47825 Medium 4.3 0.3% 6.4 and earlier 6.5 November 16, 2023
CVE-2023-46212 Medium 4.3 0.2% 6.2 and earlier 6.3 October 19, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.