high7.2
CVE-2021-24430
The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings…
Impact
The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings settings before outputting them in a PHP file, which could lead to RCE
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Optimocha | Speed Booster Pack | before 4.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://m0ze.ru/vulnerability/%5B2021-05-10%5D-%5BWordPress%5D-%5BCWE-94%5D-Speed-Booster-Pack-WordPress-Plugin-v4.2.0-beta.txt
- https://wpscan.com/vulnerability/945d6d2e-fa25-42c0-a7b4-b1794732a0df
- https://m0ze.ru/vulnerability/%5B2021-05-10%5D-%5BWordPress%5D-%5BCWE-94%5D-Speed-Booster-Pack-WordPress-Plugin-v4.2.0-beta.txt
- https://wpscan.com/vulnerability/945d6d2e-fa25-42c0-a7b4-b1794732a0df