W3speedster vulnerabilities
We track 1 vulnerability in W3speedster products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2024.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest W3speedster vulnerabilities
- 9.1 Critical severity
W3SPEEDSTER: Improper Neutralization of Directives in Dynamically Evaluated Code
The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function. This is due to the plugin passing user supplied input to eval(). Th