Perfmatters — Vulnerabilities & Security Advisories 6

Perfmatters is a WordPress performance optimization plugin designed to reduce page load times by disabling unnecessary scripts and styles. Historically, it has been susceptible to multiple cross-site scripting (XSS) vulnerabilities due to insufficient input sanitization, as well as remote code execution (RCE) flaws through improper file handling. The plugin has also faced privilege escalation issues where lower-privileged users could gain administrative access. With six CVEs recorded, Perfmatters' security track record reflects common risks in WordPress extensions, particularly around data validation and access control. While no major public incidents have been widely documented, its vulnerability history underscores the importance of regular updates and security hardening for performance tools.