10web Booster (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-24. Vendor: Unknown.

CVEs of 10web Booster

• CVE-2026-82195 - CVSS 6.5 (medium), 2026-09-24: The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud…
• CVE-2026-14287 - CVSS 4.7 (medium), 2026-08-19: The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape…
• CVE-2023-5559 - CVSS 9.1 (critical), 2023-11-27: The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete…