Vendors / w3speedster Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now w3speedster records in CISA KEV No w3speedster vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function.
CVSS 3.1 CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00979 · Published 2024-10-30 · No fix listed CWE-95
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp.This issue affects W3SPEEDSTER: from n/a through <= 7.25.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00169 · Published 2024-11-19 · No fix listed CWE-352
Priority LOW 20
Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0025 · Published 2024-02-28 · No fix listed CWE-352
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through <= 7.33.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00229 · Published 2025-01-16 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
1 0 3 0 0
THREATIST.IORead the docs