WordPress 10Web Booster plugin <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache vulnerability

Authenticated Subscriber+ Arbitrary Folder Deletion via twoclearpagecache vulnerability discovered by shark3y in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions = 2.32.7...

CVE-2025-13377

creationtimestamp| type| source ---|---|--- 2025-12-06 07:03:10+00:00| seen| https://infosec.exchange/users/offseq/statuses/115671340696966655 2025-12-06 07:03:11+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7cgntkoys25 2025-12-06 09:53:00+00:00| seen|...