Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-24708

WordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
W3speedster
Products
W3speedster
CVE-2025-23765

WordPress W3SPEEDSTER plugin <= 7.33 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through <= 7.33.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
W3speedster Wordpress
Products
W3speedster Wordpress
CVE-2024-52392

WordPress W3SPEEDSTER plugin <= 7.25 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp.This issue affects W3SPEEDSTER: from n/a through <= 7.25.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
W3speedster
Products
W3speedster
CVE-2024-8512

W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution

The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function. This is due to the plugin passing user supplied input to eval(). This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
W3speedster Wordpress
Products
W3speedster Wordpress