SiteGround Optimizer
SiteGround Optimizer provides caching, performance optimization, and site management features for WordPress websites.
SiteGround Optimizer (speed-optimizer) is a WordPress plugin with 3 published CVE records in this archive. The latest tracked vulnerability was published Oct 23, 2026; the highest published CVSS base score is 9.8.
speed-optimizerCVE-2026-111738: Speed Optimizer: Unauthorized network-wide option changes
The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options. Other endpoint, parameter, role or implementation details not named in this export are not established by this record. Affected versions: before 7.8.5.
| Safe version |
|
||
|---|---|---|---|
| Oct 23, 2026 |
CVE-2026-111738
Speed Optimizer: Unauthorized network-wide option changes
The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options. Other endpoint, parameter, role or implementation details not named in this export are not established by this record. Affected versions: before 7.8.5.
|
7.8.5 |
CVE5.5
|
| Oct 23, 2026 |
CVE-2026-111737
Speed Optimizer: Cross-site scripting
The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup). Other endpoint, parameter, role or implementation details not named in this export are not established by this record. Affected versions: before 7.8.5.
|
7.8.5 |
CVE3.5
|
| Oct 16, 2024 |
CVE-2019-25217
SiteGround Optimizer: Filesystem traversal
SiteGround Optimizer is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE9.8
|