Description
Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mohammed Kaludi | Core Web Vitals & PageSpeed Booster | ≤ 1.0.31 | — |
High · 7.1
CVE-2026-95528
EUVD-2026-85496GHSA-qpjr-rqxw-97vx
WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack