VYPR

Debloat

by WordPress

CVEs (1)

  • CVE-2026-104769MedOct 16, 2026
    risk 0.31cvss 5.9epss —

    The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to…