Plugin icon

Asset CleanUp: Page Speed Booster

wp-asset-clean-up

Vulnerabilities:

11

Last Updated:

September 16, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-09-24
Title
Asset CleanUp: Page Speed Booster < 1.4.0.6 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter
Fixed in
Fixed in 1.4.0.6
CVSS
5.5 (medium)
Published
2026-09-18
Title
Asset CleanUp: Page Speed Booster < 1.4.0.6 - Unauthenticated Stored XSS via Comment Content
Fixed in
Fixed in 1.4.0.6
CVSS
7.2 (high)
Published
2026-09-17
Title
Asset CleanUp: Page Speed Booster < 1.4.0.6 - Cross-Site Request Forgery
Fixed in
Fixed in 1.4.0.6
CVSS
4.3 (medium)
Published
2026-03-07
Title
Asset CleanUp: Page Speed Booster < 1.4.0.4 - Missing Authorization
Fixed in
Fixed in 1.4.0.4
CVSS
5.3 (medium)
Published
2024-11-27
Title
Asset CleanUp: Page Speed Booster < 1.3.9.9 - Authenticated (Admin+) Server-Side Request Forgery
Fixed in
Fixed in 1.3.9.9
CVSS
5.5 (medium)
Published
2024-08-16
Title
Asset CleanUp: Page Speed Booster < 1.3.9.4 - Missing Authorization
Fixed in
Fixed in 1.3.9.4
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.5.5
CVSS
6.1 (medium)
Published
2022-09-28
Title
Asset CleanUp: Page Speed Booster < 1.3.8.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.8.5
CVSS
6.1 (medium)
Published
2022-01-03
Title
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.8.5
CVSS
4.7 (medium)
Published
2022-01-03
Title
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action
Fixed in
Fixed in 1.3.8.5
CVSS
7.5 (high)
Published
2020-09-09
Title
Asset CleanUp: Page Speed Booster < 1.3.6.7 - CSRF & XSS
Fixed in
Fixed in 1.3.6.7
CVSS
3.5 (low)