Mohammed Kaludi Core Web Vitals & PageSpeed Booster vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mohammed Kaludi Core Web Vitals & PageSpeed Booster: 2 record(s), with affected versions and fixes.
CVE-2026-95528
High · 7.1
CWE-79 Sep 23, 2026
WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.
CVE-2025-62144
Medium · 5.4
CWE-862 Dec 31, 2025
WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.28 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Core Web Vitals & PageSpeed Booster: from n/a through <= 1.0.28.