CVE-2026-103896 | 10Web Booster Plugin up to 2.34.5 on WordPress Cache get_cache_file_dir GET path traversal

October 16, 2026 Yanac

A vulnerability classified as critical has been found in 10Web Booster Plugin up to 2.34.5 on WordPress. The affected element is the function OptimizerWebPageCache::get_cache_file_dir of the component Cache. Performing a manipulation of the argument GET results in path traversal.

This vulnerability is cataloged as CVE-2026-103896. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More