CVE-2021-25023: Optimocha Speed Booster Pack

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.3.3.1 does not escape the sbp_convert_table_name parameter before using it in a SQL statement to convert the related table, leading to an SQL injection

Affected products

  • Optimocha Speed Booster Pack: before 4.3.3.1 (fixed in 4.3.3.1)

Published 2022-01-03. Last modified 2026-06-17.