CVE-2026-6295 | sh1zen WP Optimizer Plugin up to 2.5.0 on WordPress Subquery Detection Branch parse_key_compare_field sql injection

A vulnerability, which was classified as problematic, has been found in sh1zen WP Optimizer Plugin up to 2.5.0 on WordPress. Affected by this vulnerability is the function Query::parse_key_compare_field of the component Subquery Detection Branch. The manipulation of the argument s leads to sql injection.

This vulnerability is documented as CVE-2026-6295. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More