Speed Kit

Speed Kit has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Speed Kit has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Nabil Irawan. Speed Kit is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Speed Kit vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-22487

Speed Kit <= 2.0.2 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Speed Kit banner
Latestv2.0.2

Speed Kit

baqend

Author

baqend

4.0(11)
80/100
Last Updated
2024-05-02 (2y ago)
Active Installs
2,000+
Downloads
99,672
Requires WP
4.6.0+
Requires PHP
7.3.0+
Tested up to
WP 6.2.11
Created
2017-11-24 (9y ago)

Speed Kit makes your WordPress website load instantly with one simple click. Only supported for Plesk users This plugin is only supported for users of the Plesk hosting platform in combination with the Plesk Speed Kit extension. All WordPress users who already purchased a Speed Kit license can still use the WordPress plugin as usual. Only new subscriptions via WordPress are not possible anymore. WHAT OUR CUSTOMERS LOVE Speed Kit powers about 7,000 websites, serving 200 million users monthly, accelerated 3.6 billion euros of annual revenue and scaling 25,000 requests per second. By using Speed Kit, you’ll have the following benefits: * User Experience: Turn page speed into your competitive advantage. * SEO Ranking: Let the speed-based search rank boost your visibility. * Time on Site: Make your users stay longer and click more. * Conversion Rate: Grow e-commerce revenue and funnel metrics. * Bounce Rate: Reduce your marketing costs through lower bounce rates. HOW IT WORKS After activating the plugin, Speed Kit adds a Service Worker to your WordPress. The Service Worker then reroutes all requests from your WordPress backend to a fast cache which is synchronized with your website. Speed Kit accelerates your WordPress website without any changes to the backend servers. Instead of re-engineering your server, network, and frontend performance, Speed Kit hooks into the traffic and accelerates it from the user side. WHAT IT COSTS The first 10 days of trial are free. No bank details required. After the trial period ends you can continue using Speed Kit for 9.99 € per month. If you don’t do anything, Speed Kit simply stops handling your requests and they will be executed by your backend again. Your site remains online all the time without your users noticing anything. Transparent and straightforward. No strings attached.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C