CVE-2024-5810

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.1. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to overwrite CSS, update the trial settings, purge the cache, and find attachments.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-581005.5In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When proce CVE-2024-581018.1Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a c CVE-2024-581026.5An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing u CVE-2024-581035.8Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.CVE-2024-581047.8A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s CVE-2024-581057.8A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s CVE-2024-581067.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581077.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581087.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581097.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-58115.4The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors a CVE-2024-581107.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.