Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: 10web Component: 10web Booster Clear all filters
TI-2025-12229 CVE-2025-13377 · GHSA-wq2j-5956-9ggr

10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache

Priority MEDIUM 42

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the get_cache_dir_for_page_from_url…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00524 Published 2025-12-06 No fix listed CWE-22
TI-2023-05117 CVE-2023-5559 · GHSA-xg5j-3w2m-6rhx

10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

Priority MEDIUM 44

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02788 Published 2023-11-27 Fixed in 2.24.18