All In One Performance Accelerator Vulnerabilities

The AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:

5.3

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Apr 1, 2025

CVE-2025-31788 on NVD →

[en] Insertion of Sensitive Information into Log File vulnerability in smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug allows Retrieve Embedded Sensitive Data. This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through 1.2.

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Apr 1, 2025

CVE-2025-31788 on NVD →

[en] Missing Authorization vulnerability in smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through 1.2.

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Mar 27, 2025

CVE-2025-22647 on NVD →

The AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...

CVSS:

4.3

Affected:

up to 1.2

Fixed in:

1.3

Disclosed:

Feb 3, 2025

CVE-2025-22647 on NVD →