← CVE Intelligence

CVE-2026-110651

Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer PUBLISHED

Description (CNA)

The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.

Affected (CNA)

Vendor / productVersions
Unknown / Swift Performance Liteaffected 0 before 2.3.7.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.