Extension WordPress
Vulnérabilités 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
Cette page rassemble les failles publiées pour 10Web Booster – Website speed optimization, Cache & Page Speed optimizer, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
5 fiches
10Web Booster <= 2.32.7 – Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the get_cache_dir_for_page_from_url() function in all versions up to, and including,…
*-2.32.7
2.32.11
05/12/2025
10Web Booster <= 2.24.14 – Unauthenticated Arbitrary Option Deletion
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to unauthorized loss of data due to insufficient validation on the option value being supplied to the two_init_flow_score and the two_init_flow_score…
*-2.24.14
2.24.18
29/10/2023
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.13.44 – Missing Authorization in Settings Import to Stored Cross-Site Scripting
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check within the settings import functionality in versions up to, and…
*-2.13.44
2.13.45
21/02/2023
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.12.23 – Unauthenticated SQL Injection
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to SQL Injection via the filtered_ids parameter in versions up to, and including, 2.12.23 due to insufficient escaping on the user…
*-2.12.22
2.12.23
25/01/2023
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.8.34 – Missing Authorization to Plugin Deactivation
The 10Web Booster plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the two_deactivate_plugin function in versions up to, and including, 2.8.34. This makes it possible for authenticated attackers, with subscriber-level permissions…
*-2.8.34
2.8.35
19/11/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.