CVE-2025-22647

Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through <= 1.2.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2025-03-27

Last modified

2026-04-28

Weaknesses

CWE-862

Affected products

• Aio Performance Profiler (Smackcoders Inc.)
• Compress Debug (Smackcoders Inc.)
• Monitor (Smackcoders Inc.)
• Optimize (Smackcoders Inc.)

References

• https://patchstack.com/database/Wordpress/Plugin/all-in-one-performance-accelerator/vulnerability/wordpress-aio-perform…