Medium 5.4
2026-01-22< 2.15
CVE-2026-24384
Minimum safe version
2.15
Update to 2.15 or later to address 4 fixable vulnerabilities
CVE-2026-24384
Merge + Minify + Refresh < 1.10.7 - Authenticated Arbitrary File Delete
Merge + Minify + Refresh <= 1.10.7 - Cross-Site Request Forgery leading to Arbitrary File Deletion and Site Reset
WordPress Merge + Minify + Refresh plugin <= 1.10.6 - Arbitrary File Deletion vulnerability