Read the docs

Gabe Livan

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Gabe Livan records in CISA KEV

No Gabe Livan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Asset Cleanup 1 record LOW

Records

7 records

TI-2026-11315 CVE-2026-13354 · GHSA-7gwr-8m73-rgp7

Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content

Priority LOW 38

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 1.4.0.5 due to insufficient input sanitization and output…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00419 Published 2026-09-19 No fix listed CWE-79
TI-2024-28966 CVE-2024-43314 · GHSA-2w92-h6fh-j7gw

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2024-11-01 No fix listed CWE-862
TI-2026-33029 CVE-2026-45212 · GHSA-7h7f-98xc-35q3

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed B…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00225 Published 2026-05-12 No fix listed CWE-862
TI-2026-10376 CVE-2026-12037 · GHSA-g4cp-fj5c-7599

Server-side request forgery in Gabe Livan Asset CleanUp: Page Speed Booster

Priority LOW 25

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'page_url' parameter.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.0031 Published 2026-09-25 No fix listed CWE-918
TI-2021-14985 CVE-2021-36899 · GHSA-q34g-xwpj-xqx4

Cross-site scripting in Gabe Livan Asset CleanUp: Page Speed Booster

Priority LOW 23

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00605 Published 2022-10-11 No fix listed CWE-79
TI-2024-35936 CVE-2024-53738 · GHSA-ph42-42qj-c8qg

WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability

Priority LOW 20

Server-Side Request Forgery (SSRF) vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00275 Published 2024-11-30 No fix listed CWE-918
Open these records in search →