Read the docs

10web

Records148All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9

Exploited now

10web records in CISA KEV

No 10web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Photo Gallery 49 records HIGH Form Maker 24 records HIGH Slider 9 records MEDIUM Map Builder For Google Maps 4 records HIGH 10web Booster 2 records MEDIUM 10web Social Post Feed 2 records MEDIUM 10webanalytics 2 records LOW Image Optimizer 2 records MEDIUM

Records

2 records in 10web Booster · all components

TI-2023-05117 CVE-2023-5559 · GHSA-xg5j-3w2m-6rhx

10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

Priority MEDIUM 44

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02788 Published 2023-11-27 Fixed in 2.24.18
TI-2025-12229 CVE-2025-13377 · GHSA-wq2j-5956-9ggr

10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache

Priority MEDIUM 42

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the get_cache_dir_for_page_from_url…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00524 Published 2025-12-06 No fix listed CWE-22
Open these records in search →