RSS   Vulnerabilities for 'Speed booster pack'   RSS

2022-01-03
 
CVE-2021-25023

CWE-89
 

 
The Speed Booster Pack ????�? PageSpeed Optimization Suite WordPress plugin before 4.3.3.1 does not escape the sbp_convert_table_name parameter before using it in a SQL statement to convert the related table, leading to an SQL injection

 
2021-08-02
 
CVE-2021-24430

CWE-94
 

 
The Speed Booster Pack ????�? PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings settings before outputting them in a PHP file, which could lead to RCE

 


Copyright 2024, cxsecurity.com

 

Back to Top