Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in RapidLoad Power-Up for Autoptimize 1.7.1

  • Severity: medium-risk
  • Status: Open
  • Publication: March 17, 2023

The RapidLoad Power-Up plugin for WordPress has a security issue that makes it vulnerable to attack. This issue affects versions up to 1.7.1 and is caused by an incorrect or missing system that checks requests are legitimate. This means that if an unauthorised user can get a site administrator to click on a link

Detected in:

RapidLoad – Auto Analyze & Optimize Page Speed (Instant Results) fixed vulnerable versions:
RapidLoad – Optimize Web Vitals Automatically fixed vulnerable versions:
RapidLoad 2.1 – Speed Monster in One Plugin fixed vulnerable versions:
RapidLoad 2.2 – Speed Monster in One Plugin fixed vulnerable versions:
RapidLoad AI – Optimize Web Vitals Automatically fixed vulnerable versions:
RapidLoad Power-Up for Autoptimize open vulnerable versions: >= * <= 1.7.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.