Skip to content
Threat Feed
Subscribe

Product

10Web Booster (<= 2.34.10)

1 brief RSS
critical advisory

Arbitrary File Upload in 10Web Booster WordPress Plugin (CVE-2026-108587)

An unauthenticated remote code execution vulnerability exists in 10Web Booster versions 2.34.10 and earlier due to insecure file handling and nonce leakage.

10Web Booster web-application wordpress remote-code-execution cve-2026-108587
2t 1c