Approved changes feed: RSS · Atom

cpe:2.3:a:swteplugins:swift_performance:*:*:*:*:lite:wordpress:*:*

part: a version: * update: *

VendorSwteplugins (67f2315f-583d-540b-951d-28f18cfbb26f)
ProductSwift Performance (c424ba6a-1bc7-56d4-8d3a-ea89d16aea0d)
Edition*
Language*
Software editionlite
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10516 vulnerable 2026-06-08 06:23:46.836117 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
HIGH (8.1)
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
Published: 2024-12-06T13:45:19.633Z
Updated: 2026-04-08T16:50:24.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6289 vulnerable 2026-06-08 06:19:46.861755 Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens.
Published: 2023-12-18T20:08:00.760Z
Updated: 2025-05-07T20:32:33.463Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.