Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24430

Speed Booster Pack 4.2.0-beta - Authenticated (admin+) RCE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings settings before outputting them in a PHP file, which could lead to RCE

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Speed Booster Pack ⚡ PageSpeed Optimization Suite

  • 4.2.0-beta to < 4.2.0-beta*affected
  • 4.2.0 to < 4.2.0affected

References