Vulnerabilities / Debloat
Debloat vulnerabilities
Advisories WPSec published for Debloat – Remove Unused CSS, Optimize JS. Other sources may list more. Its attack surface: Debloat on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0894 | Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via Google Fonts Inline Minify | Medium 5.9 | 1.4.0 |
License: CC BY 4.0