Cross-Site Request Forgery in Optimize More! CSS Plugin for WordPress

CVE-2025-9945

What is CVE-2025-9945?

The Optimize More! – CSS plugin for WordPress contains a vulnerability that allows unauthenticated attackers to exploit a missing nonce validation in the reset_plugin function. By tricking a site administrator into executing a crafted request, an attacker can reset the plugin's optimization settings, compromising the site's performance without the administrator's knowledge. Administrators using versions up to 1.0.3 should prioritize updating the plugin to reinforce security against such attacks.

References