Threats tagged 'ghsa-38rr-wcwh-jgw6'

1 threat

Threats tagged 'ghsa-38rr-wcwh-jgw6'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.9%	CVE-2026-10858710Web Booster – Website speed optimization, Cache & Page Speed optimizer · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.9%2026-10-15CVE Database V5CVE-2026-108587 The 10Web Booster WordPress plugin up to version 2.34.10 contains an arbitrary file upload vulnerability due to missing file type validation and leaked authentication nonce. This allows unauthenticated attackers to upload potentially executable files, enabling remote code execution. The vulnerability arises from a world-readable REST nonce file generated during bulk optimization pauses, which bypasses authentication checks. EPSS 0.9%Vulnerability 10web #cwe-434 #ghsa-38rr-wcwh-jgw6	CVE Database V5	2026-10-15

Showing 1–1 of 1 result