Skip to content
OpenAdvisories

Vendor

w3speedster

4 known vulnerabilities.

Products

W3SPEEDSTER 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-8512

    W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution

    The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function. This is due to the plugin passing user supplied input to eval(). T…

    w3speedster W3SPEEDSTER Web / CMS