Wp2Speed

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wp2speed:wp2speed:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp2Speed (5d4e907b-f370-53d9-a57f-6c66ae5f30ba)
ProductWp2Speed (0e822078-6ed7-5474-b194-27e89a7f7424)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5810 vulnerable 2026-06-08 06:56:17.483108 WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials
MEDIUM (5.3)
The WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.1. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to overwrite CSS, update the trial settings, purge the cache, and find attachments.
Published: 2024-07-09T08:33:03.671Z
Updated: 2026-04-08T16:41:07.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37924 vulnerable 2026-06-08 06:39:48.248653 WordPress WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin <= 1.0.1 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wp2speed WP2Speed Faster allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP2Speed Faster: from n/a through 1.0.1.
Published: 2024-08-12T22:56:42.982Z
Updated: 2026-04-28T16:10:01.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.