Vulnerabilities

TI-2024-06076 CVE-2024-6553 · GHSA-985r-jphv-4gqf

WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure

LOW 30

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00373 Published 2024-07-24 No fix listed CWE-200

TI-2023-11680 CVE-2023-26543 · GHSA-j3qr-8pp8-m4vp

WordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin <= 3.1.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2023-11-13 No fix listed CWE-352

Vulnerabilities

Filters

WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure

WordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)