CVE-2026-39750

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39750

The StoreGrowth: Smart Sales Booster for WooCommerce plugin (versions

EUVD-2026-93259

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service. id: CVE-2023-5559 info: name: 10Web Booster 2.24.18 - Unauthenticated Arbitra...

booster

Booster - initramfs rápido, seguro y moderno para Linux Booster hace que el arranque temprano se sienta más ligero, rápido y confiable. Construye imágenes initramfs compactas que llevan tu sistema Linux desde el firmware hasta el sistema de archivos raíz real con mínimas complicaciones y un sólid...

CVE-2021-34646

CVE-2021-34646 PoC detalle de esta vulnerabilidad por NVD Las versiones hasta la 5.4.3, inclusive, del plugin Booster for WooCommerce para WordPress son vulnerables a un bypass de autenticación a través de la función processemailverification debido a una debilidad en la generación de tokens...

CVE-2021-34646

CVE-2021-34646 PoC para CVE-2021-34646 Título del Exploit: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Bypass de Autenticación Fecha: 2021-09-16 Autor del Exploit: Sebastian Kriesten 0xB455 Contacto: https://twitter.com/0xB455 Plugin Afectado: Booster for WooCommerce Plugin Slug:...

CVE-2026-94121

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...

EUVD-2026-89838

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...

CVE-2026-94121 WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...

CVE-2026-94121 WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...

CVE-2026-94121

The 10Web Booster WordPress plugin (versions

CVE-2026-94121: Deserialization of Untrusted Data

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...

CVE-2026-12037

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...

WordPress 10Web Booster plugin < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion vulnerability

Unauthenticated Connection Secret Disclosure and Deletion vulnerability discovered by Shirshak Roy in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions 2.34.0...

CVE-2026-12037 Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...

EUVD-2026-86575

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...

CVE-2026-12037

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in all versions up to and including 1.4.0.5 . The vulnerability exists via the 'page_url' parameter and is only exploitable when an administrator has configured the plugin's dom_get_type...

CVE-2026-12037 Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...