← العودة للجدول
CVE-2026-108587
CVE-2026-108587 — The 10Web Booster – Website speed optimization, Cache & Page Speed optimiz
📅 2026-10-15
🔴 Critical 🔥 No NVD Vulnerability WordPress CVSS 9.8

📋 الوصف الكامل

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the page_id parameter, combined with a world-readable leaked nonce that bypasses authentication checks. Thi

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-108587

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.34.10

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←