Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:swift_performance_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSwift Performance Lite (5615903c-ae68-5fde-91e6-f12fdf40fe85)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-110651 vulnerable 2026-11-03 10:16:00.870556 Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer
The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.
Published: 2026-10-21T06:00:21.895Z
Updated: 2026-10-21T10:35:04.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6289 vulnerable 2026-06-08 06:19:46.860631 Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens.
Published: 2023-12-18T20:08:00.760Z
Updated: 2025-05-07T20:32:33.463Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.