Unknown 10web Booster vulnerabilities

2 CVEs affecting Unknown 10web Booster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-82195, published 2026-09-24.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-82195, published 2026-09-24. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing that secret to…
• CVE-2026-14287, published 2026-08-19. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before…