PT-2024-35846 · WordPress · Asset Cleanup: Page Speed Booster

Zaidan Rizaki · Published 2024-11-30 · Updated 2024-12-01 · CVE-2024-53738

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Asset CleanUp: Page Speed Booster versions 1.3.9.8 and earlier

Description A Server-Side Request Forgery (SSRF) issue affects the Asset CleanUp: Page Speed Booster plugin, allowing an attacker to perform Server Side Request Forgery. This could potentially lead to unauthorized access to internal resources.

Recommendations For versions 1.3.9.8 and earlier, as a temporary workaround, consider restricting access to the plugin until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-53738

Affected Products

Asset Cleanup: Page Speed Booster

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-53738 · Security Note
• https://twitter.com/CVEnew/status/1862968131792367911 · Twitter Post
• https://t.me/cvenotify/102751 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/wp-asset-clean-up/vulnerability/wordpress-asset-cleanup-page-speed-booster-plugin-1-3-9-8-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1863234326747369697 · Twitter Post
• https://t.me/cvedetector/11717 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/wp-asset-clean-up/vulnerability/wordpress-asset-cleanup-page-speed-booster-plugin-1-3-9-8-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note