CVE-2021-24776: Wp Performance Score Booster Project Wp Performance Score Booster

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

Affected products

• Wp Performance Score Booster Project Wp Performance Score Booster: before 2.1 (fixed in 2.1)

Published 2021-11-17. Last modified 2026-06-17.