Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/15 5:17 a.m.•25 views

CVE-2026-108587

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the pageid...

9.8CVSS0.00916EPSS
SaveExploits0References12
CVE
CVE
•added 2026/10/15 4:26 a.m.•115 views

CVE-2026-108587

The 10Web Booster plugin for WordPress (versions up to and including 2.34.10 ) is vulnerable to unauthenticated arbitrary file upload via the compressCustom function. The root cause is a lack of file type validation and extension filtering on the page_id parameter. Attackers can bypass authentica...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References12
EUVD
EUVD
•added 2026/10/15 4:26 a.m.•18 views

EUVD-2026-101824

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the pageid...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2026/10/15 4:26 a.m.•59 views

CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the pageid...

9.8CVSS0.00916EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•19 views

PT-2026-114758

Name of the Vulnerable Software and Affected Versions 10Web Booster versions prior to 2.34.11 Description An arbitrary file upload issue exists in the compressCustom function. The flaw stems from missing file type validation and extension filtering on the page id parameter. This is combined with ...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•20 views

CVE-2026-108587: Unrestricted Upload of File with Dangerous Type

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the pageid...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References2
Rows per page
Query Builder