CVE-2023-5559

The 10Web Booster WordPress plugin, in versions prior to 2.24.18 , is vulnerable to a design flaw where it fails to validate the option name provided during certain AJAX actions . This oversight allows unauthenticated users to delete arbitrary options directly from the database, which can result ...

CVE-2025-13377

The vulnerability CVE-2025-13377 affects the WordPress plugin “10Web Booster – Website speed optimization, Cache & Page Speed optimizer”, specifically in get_cache_dir_for_page_from_url() across all versions up to and including 2.32.7. The underlying issue is insufficient file path validation, en...