The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings settings before outputting them in a PHP file, which could l…
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.01721·Published 2021-08-02·Fixed in 4.2.0CWE-94
The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.3.3.1 does not escape the sbp_convert_table_name parameter before using it in a SQL statement to convert the related table, leading to an SQ…
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.01148·Published 2022-01-03·Fixed in 4.3.3.1CWE-89