← WordPress Vulnerabilities
WordPress security by component

Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer

Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 09, 2026; the highest CVE/CNA score is 4.3.

Plugin slug: clearfy-cache-wordpress-optimization-plugin-minify-html-css-js-defer

CVE-2025-13749: Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer: Cross-site request forgery

Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedJan 09, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 09, 2026 CVE-2025-13749
Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer: Cross-site request forgery
Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending