Skip to content
OpenAdvisories

Vendor

Gabe Livan

7 known vulnerabilities.

Products

Asset CleanUp: Page Speed Booster 6 Asset CleanUp: Page Speed Booster (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-12037

    Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter

    The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'page_url' parameter. This makes it possible for authenticated attackers, with administrator-level ac…

    Gabe Livan Asset CleanUp: Page Speed Booster Web / CMS
  • Medium 5.3
    CVE-2026-45212

    WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through <= 1.4.0.3.

    Gabe Livan Asset CleanUp: Page Speed Booster
  • Medium 4.4
    CVE-2024-53738

    WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through <= 1.3.9.8.

    Gabe Livan Asset CleanUp: Page Speed Booster
  • Medium 4.3
    CVE-2024-43314

    WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3.

    Gabe Livan Asset CleanUp: Page Speed Booster
  • Medium 4.8
    CVE-2021-36899

    WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.

    Gabe Livan Asset CleanUp: Page Speed Booster (WordPress plugin) Web / CMS