Medium · 4.7 CVE-2023-35883 EUVD-2023-39876GHSA-p29h-x3w2-549g

WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection

Published Dec 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Magazine3 Product: Core Web Vitals & PageSpeed Booster

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magazine3 Core Web Vitals & PageSpeed Booster.This issue affects Core Web Vitals & PageSpeed Booster: from n/a through 1.0.12.

Affected products

Vendor	Product	Affected	Fixed
Magazine3	Core Web Vitals & PageSpeed Booster	≤ 1.0.12	—

References

https://patchstack.com/database/vulnerability/core-web-vitals-pagespeed-booster/wordpress-core-web-vitals-pagespeed-booster-plugin-1-0-12-open-redirection-vulnerability?_s_id=cve vdb-entry