CVE-2023-6289: Swteplugins Swift Performance

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens.

Affected products

• Swteplugins Swift Performance: before 2.3.6.15 (fixed in 2.3.6.15)

Published 2023-12-18. Last modified 2026-06-17.