Vulnerabilities (CVE)

Filtered by vendor 10web Subscribe
Filtered by product 10web Booster
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-5559 1 10web 1 10web Booster 2023-12-10 N/A 9.1 CRITICAL
The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.