Advisories · Technology
10Web Booster – Website speed optimization, Cache & Page Speed optimizer.
Every CVE that names 10Web Booster – Website speed optimization, Cache & Page Speed optimizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
- 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
- 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
- Unrestricted file upload
- CVSS 7.2 High
10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
- 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
- Cross-site scripting (XSS)
- CVSS 8.8 High
WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
- 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
- Insecure deserialization
- CVSS 9.6 CriticalCritical · CVSS 9+
10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache
- 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
- Path traversal