Plugin icon

10Web Booster – Website speed optimization, Cache & Page Speed optimizer

tenweb-speed-optimizer

Vulnerabilities:

8

Last Updated:

October 13, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
10Web Booster < 2.34.8 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
Fixed in
Fixed in 2.34.8
CVSS
7.5 (high)
Published
2026-10-14
Title
10Web Booster < 2.34.11 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
Fixed in
Fixed in 2.34.11
CVSS
9.8 (critical)
Published
2026-10-09
Title
10Web Booster < 2.34.10 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
Fixed in
Fixed in 2.34.10
CVSS
7.2 (high)
Published
2026-09-24
Title
10Web Booster – Website speed optimization, Cache & Page Speed optimizer < 2.34.0 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 2.34.0
CVSS
6.6 (medium)
Published
2026-09-22
Title
10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion
Fixed in
Fixed in 2.34.0
CVSS
6.5 (medium)
Published
2026-08-17
Title
TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass
Fixed in
Fixed in 2.33.5
CVSS
4.7 (medium)
Published
2025-12-05
Title
10Web Booster < 2.32.11 - Subscriber+ Arbitrary Folder Deletion
Fixed in
Fixed in 2.32.11
CVSS
8.5 (high)
Published
2023-10-31
Title
10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion
Fixed in
Fixed in 2.24.18
CVSS
8.2 (high)