Lucene search
K

10 matches found

EUVD
EUVD
added 2025/12/06 9:31 a.m.6 views

EUVD-2025-201539

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...

9.6CVSS5.3AI score0.00086EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-49428

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.01995EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.1 views

CVE-2023-26543

Cross-Site Request Forgery CSRF vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin = 3.1.4 versions...

8.8CVSS7AI score0.0007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/02 7:35 a.m.11 views

CVE-2024-8800 RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting

The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and...

6.1CVSS6.1AI score0.01995EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/02 7:35 a.m.12 views

CVE-2024-8800 RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting

The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and...

6.1CVSS0.01995EPSS
Exploits0References3
NVD
NVD
added 2024/07/24 7:15 a.m.11 views

CVE-2024-6553

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00746EPSS
Exploits0References2
NVD
NVD
added 2023/11/13 1:15 a.m.6 views

CVE-2023-26543

Cross-Site Request Forgery CSRF vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin = 3.1.4 versions...

8.8CVSS0.0007EPSS
Exploits0References1
OSV
OSV
added 2023/11/13 1:15 a.m.0 views

CVE-2023-26543

Cross-Site Request Forgery CSRF vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin = 3.1.4 versions...

8.8CVSS7.3AI score
Exploits0References1
CVE
CVE
added 2023/11/13 12:2 a.m.42 views

CVE-2023-26543

CVE-2023-26543 affects the WP Meteor Website Speed Optimization Addon for WordPress, versioned

8.8CVSS6.5AI score0.0007EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/10/29 12:0 a.m.5 views

WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Plugin <= 2.24.14 is vulnerable to Settings Change

Software 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Type Plugin Vulnerable versions = 2.24.14 Fixed in 2.24.18 OWASP Top 10 A3: Injection Classification Settings Change CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 75375faf9c46...

7.2AI score
Exploits0References2Affected Software1
Rows per page
Query Builder