Extension WordPress
Vulnérabilités Asset CleanUp: Page Speed Booster
Cette page rassemble les failles publiées pour Asset CleanUp: Page Speed Booster, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Asset CleanUp: Page Speed Booster
8 fiches
Asset CleanUp: Page Speed Booster <= 1.4.0.3 – Missing Authorization
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.4.0.3. This makes it possible for unauthenticated attackers to…
*-1.4.0.3
1.4.0.4
07/03/2026
Asset CleanUp: Page Speed Booster <= 1.3.9.8 – Authenticated (Admin+) Server-Side Request Forgery
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.9.8. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web…
*-1.3.9.8
1.3.9.9
27/11/2024
Asset CleanUp: Page Speed Booster <= 1.3.9.3 – Missing Authorization
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.3.9.3. This makes it possible for authenticated attackers,…
*-1.3.9.3
1.3.9.4
16/08/2024
Freemius SDK <= 2.5.9 – Reflected Cross-Site Scripting via fs_request_get
The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-1.3.5.4
1.3.5.5
18/07/2023
Asset CleanUp: Page Speed Booster <= 1.3.8.4 – Reflected Cross-Site Scripting
The Asset CleanUp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.8.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-1.3.8.4
1.3.8.5
28/09/2022
Asset CleanUp <= 1.3.8.4 – Reflected Cross-Site Scripting
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
*-1.3.8.4
1.3.8.5
03/01/2022
Asset CleanUp <= 1.3.8.4 – Reflected Cross-Site Scripting via AJAX Action
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading to a Reflected Cross-Site Scripting issue
[*, 1.3.8.5)
1.3.8.5
03/01/2022
Asset CleanUp: Page Speed Booster <= 1.3.6.6 – Reflected Cross-Site Scripting
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the tab parameter in versions up to, and including 1.3.6.6 due to insufficient input sanitization and output escaping on add_query_arg and remove_query_arg.…
[*, 1.3.6.7)
1.3.6.7
20/04/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.