Known vulnerabilities in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

Speed up your site with 10Web Booster. Pass Core Web Vitals by optimizing HTML / CSS / JavaScript, Image Optimization, Lazy Loading, Cache, Google Fon …

11Reported vulnerabilities

9.8Highest CVSS score

2.33.5Latest version

70,000+Active installs

What to do now

Update 10Web Booster – Website speed optimization, Cache & Page Speed optimizer to 2.34.8 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-5559	Critical 9.1	2.8%	Before 2.24.18	`2.24.18`	November 27, 2023
CVE-2026-108587	Critical 9.8	0.9%	0 to 2.34.10 (inclusive)	`2.34.11`	October 15, 2026
WF-4f3f0ef8-8a13-4110-a402-e1bcf493560a	High 8.8	—	2.12.22 and earlier	`2.12.23`	January 25, 2023
CVE-2025-13377	High 8.1	0.5%	Before 2.32.11	`2.32.11`	December 6, 2025
CVE-2026-103896	High 7.5	0.5%	0 to 2.34.5 (inclusive)	`2.34.8`	October 16, 2026
CVE-2026-94121	High 7.5	0.4%	2.33.6 and earlier	`2.34.0`	September 24, 2026
CVE-2026-107742	High 7.2	0.2%	0 to 2.34.8 (inclusive)	`2.34.10`	October 10, 2026
CVE-2026-14287	High 7.2	0.2%	2.33.4 and earlier	`2.33.5`	August 17, 2026
WF-9c8b0de4-e3ee-4711-8f27-097dee843dd8	High 7.2	—	2.13.44 and earlier	`2.13.45`	February 21, 2023
CVE-2026-82195	Medium 5.3	0.2%	2.33.0 and earlier	`2.34.0`	September 22, 2026
WF-f62063c8-7559-492a-9caf-fae256052d1a	Medium 5.4	—	2.8.34 and earlier	`2.8.35`	November 19, 2022

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.