W3Speedster
Approved changes feed: RSS · Atom
cpe:2.3:a:w3speedster:w3speedster:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | W3Speedster (3f19b453-3a71-5248-b0d8-8b03109a9793) |
|---|---|
| Product | W3Speedster (7f27ae14-20e1-5ca9-8c72-2d5a45874962) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/common-repository/w3speedster-wp |
purl2cpe | 2026-06-01 10:18:05.875457 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-23765 |
vulnerable | 2026-06-08 07:10:56.301454 |
WordPress W3SPEEDSTER plugin <= 7.33 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through <= 7.33.
Published: 2025-01-16T20:06:54.907Z
Updated: 2026-05-11T22:41:09.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8512 |
vulnerable | 2026-06-08 07:00:24.815590 |
W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution
CRITICAL (9.1)
The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function. This is due to the plugin passing user supplied input to eval(). This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.
Published: 2024-10-30T11:00:59.962Z
Updated: 2026-04-08T16:43:28.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52392 |
vulnerable | 2026-06-08 06:52:15.063564 |
WordPress W3SPEEDSTER plugin <= 7.25 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (6.3)
Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp.This issue affects W3SPEEDSTER: from n/a through <= 7.25.
Published: 2024-11-19T22:03:08.965Z
Updated: 2026-04-28T16:10:40.932Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24708 |
vulnerable | 2026-06-08 06:29:41.586752 |
WordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19.
Published: 2024-02-28T13:20:16.604Z
Updated: 2026-04-28T16:09:10.250Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.