Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Gabe Livan Clear all filters
TI-2026-10376 CVE-2026-12037 · GHSA-g4cp-fj5c-7599

Server-side request forgery in Gabe Livan Asset CleanUp: Page Speed Booster

Priority LOW 25

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'page_url' parameter.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.0031 Published 2026-09-25 No fix listed CWE-918
TI-2026-11315 CVE-2026-13354 · GHSA-7gwr-8m73-rgp7

Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content

Priority LOW 38

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 1.4.0.5 due to insufficient input sanitization and output…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00419 Published 2026-09-19 No fix listed CWE-79
TI-2026-33029 CVE-2026-45212 · GHSA-7h7f-98xc-35q3

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed B…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00225 Published 2026-05-12 No fix listed CWE-862
TI-2024-35936 CVE-2024-53738 · GHSA-ph42-42qj-c8qg

WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability

Priority LOW 20

Server-Side Request Forgery (SSRF) vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00275 Published 2024-11-30 No fix listed CWE-918
TI-2024-28966 CVE-2024-43314 · GHSA-2w92-h6fh-j7gw

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2024-11-01 No fix listed CWE-862
TI-2021-14985 CVE-2021-36899 · GHSA-q34g-xwpj-xqx4

Cross-site scripting in Gabe Livan Asset CleanUp: Page Speed Booster

Priority LOW 23

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00605 Published 2022-10-11 No fix listed CWE-79