What’s Vulnerable › Products

10Web Booster – Website speed optimization, Cache & Page Speed optimizer vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your 10Web Booster – Website speed optimization, Cache & Page Speed optimizer version is affected

Latest 10Web Booster – Website speed optimization, Cache & Page Speed optimizer vulnerabilities

• CVE-2026-103896 — 10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path (CVSS 7.5)
• CVE-2026-108587 — 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter (CVSS 9.8)
• CVE-2026-107742 — 10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name (CVSS 7.2)
• CVE-2026-94121 — WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2026-82195 — 10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion (CVSS 6.5)
• CVE-2026-14287 — TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass (CVSS 4.7)
• CVE-2025-13377 — 10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache (CVSS 8.1)
• CVE-2023-5559 — 10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion (CVSS 9.1)