All products

tenweb-speed-optimizer

WordPress · Plugin
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache PathCVE-2026-103896 tenweb-speed-optimizer WordPress High Fix reported
10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterCVE-2026-108587 tenweb-speed-optimizer WordPress Critical Fix reported
10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author NameCVE-2026-107742 tenweb-speed-optimizer WordPress High Fix reported
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 - Authenticated (Contributor+) PHP Object InjectionCVE-2026-94121 tenweb-speed-optimizer WordPress High Fix reported
10Web Booster <= 2.33.0 - Missing AuthorizationCVE-2026-82195 tenweb-speed-optimizer WordPress Medium Fix reported
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.4 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-14287 tenweb-speed-optimizer WordPress High Fix reported
10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cacheCVE-2025-13377 tenweb-speed-optimizer WordPress Critical Fix reported
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.13.44 - Missing Authorization in Settings Import to Stored Cross-Site Scripting tenweb-speed-optimizer WordPress High Fix reported
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.8.34 - Missing Authorization to Plugin Deactivation tenweb-speed-optimizer WordPress Medium Fix reported
10Web Booster <= 2.24.14 - Unauthenticated Arbitrary Option DeletionCVE-2023-5559 tenweb-speed-optimizer WordPress Medium Fix reported
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.12.23 - Unauthenticated SQL Injection tenweb-speed-optimizer WordPress High Fix reported