Approved changes feed: RSS · Atom

cpe:2.3:a:wpblast:wp_blast_|_seo_&_performance_booster:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpblast (8a0f0522-c940-5606-918c-7e81c78a0839)
ProductWp Blast | Seo & Performance Booster (c45cdedb-1a22-5b50-ba6e-877162964f41)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9622 vulnerable 2026-06-08 07:47:09.391969 WP Blast | SEO & Performance Booster <= 1.8.6 - Cross-Site Request Forgery to Cache Clearing
MEDIUM (4.3)
The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6. This is due to missing or incorrect nonce validation on multiple administrative actions in the Settings class. This makes it possible for unauthenticated attackers to trigger cache purging, sitemap clearing, plugin data purging, and score resetting operations via forged requests granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2025-09-10T06:38:49.546Z
Updated: 2026-04-08T17:17:49.411Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.