sh1zen

Products

Product	CVEs	Exploited	Latest
Multi Uploader for Gravity Forms	4	–	Sep 17, 2026
WP Optimizer	1	–	Jun 27, 2025
WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals	1	–	Sep 19, 2026

CVE-2026-6295 Medium 4.9 WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter 0.5%
CVE-2026-87796 Critical 9.8 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload 1.1%
CVE-2026-5581 Critical 9.1 Multi Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Media Deletion 0.7%
CVE-2025-14344 Critical 9.8 Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion 0.5%
CVE-2025-53314 Critical 9.6 WordPress WP Optimizer plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
CVE-2025-23921 Critical 9.0 WordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability 0.5%