Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Asset Cleanup Component: Page Speed Booster Project Clear all filters
TI-2021-14985 CVE-2021-36899 · GHSA-q34g-xwpj-xqx4

Cross-site scripting in Gabe Livan Asset CleanUp: Page Speed Booster

Priority LOW 23

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00605 Published 2022-10-11 No fix listed CWE-79
TI-2021-07262 CVE-2021-24983 · GHSA-7fw2-wgp8-f9rj

Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action

Priority LOW 29

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00824 Published 2022-02-01 Fixed in 1.3.8.5 CWE-79
TI-2021-07216 CVE-2021-24937 · GHSA-g35p-w6wm-856g

Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting

Priority LOW 29

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Sit…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-02-01 Fixed in 1.3.8.5 CWE-79