Known vulnerabilities in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

Speed up your site with 10Web Booster. Pass Core Web Vitals by optimizing HTML / CSS / JavaScript, Image Optimization, Lazy Loading, Cache, Google Fon …

5Reported vulnerabilities

8.8Highest CVSS score

2.33.5Latest version

70,000+Active installs

What to do now

Update 10Web Booster – Website speed optimization, Cache & Page Speed optimizer to 2.33.5 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-4f3f0ef8-8a13-4110-a402-e1bcf493560a	High 8.8	—	2.12.22 and earlier	`2.12.23`	January 25, 2023
CVE-2025-13377	High 8.1	0.5%	Before 2.32.11	`2.32.11`	December 6, 2025
CVE-2026-14287	High 7.2	0.2%	2.33.4 and earlier	`2.33.5`	August 17, 2026
WF-9c8b0de4-e3ee-4711-8f27-097dee843dd8	High 7.2	—	2.13.44 and earlier	`2.13.45`	February 21, 2023
WF-f62063c8-7559-492a-9caf-fae256052d1a	Medium 5.4	—	2.8.34 and earlier	`2.8.35`	November 19, 2022

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.