Vulnerabilities

TI-2024-08668 CVE-2024-9344 · GHSA-ppg4-q866-77hq

Cross-site scripting in BerqWP – Automated All-In-One Page Speed Optimization for Core…

LOW 29

The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00375 Published 2024-10-02 No fix listed CWE-79

TI-2024-25248 CVE-2024-37942 · GHSA-v78r-chcj-pp8v

WordPress BerqWP plugin <= 1.7.5 - Unauthenticated Non-Blind Server Side Request Forgery (SSRF) vulnerability

LOW 37

Server-Side Request Forgery (SSRF) vulnerability in Berqier Ltd BerqWP.This issue affects BerqWP: from n/a through 1.7.5.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00303 Published 2024-07-22 No fix listed CWE-918

Vulnerabilities

Filters

Cross-site scripting in BerqWP – Automated All-In-One Page Speed Optimization for Core…

WordPress BerqWP plugin <= 1.7.5 - Unauthenticated Non-Blind Server Side Request Forgery (SSRF) vulnerability