CVE-2026-108587 | 10Web Booster Plugin up to 2.34.10 on WordPress compressCustom page_id unrestricted upload

October 15, 2026 Yanac

A vulnerability was found in 10Web Booster Plugin up to 2.34.10 on WordPress. It has been declared as critical. This issue affects the function compressCustom. The manipulation of the argument page_id results in unrestricted upload.

This vulnerability was named CVE-2026-108587. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More