Asset CleanUp: Page Speed Booster — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Asset CleanUp: Page Speed Booster, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-12037	Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter CWE-918	5.5	Medium	2026-09-25
CVE-2026-13354	Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content CWE-79	7.2	High	2026-09-19
CVE-2026-66571	WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.5 - Cross Site Request Forgery (CSRF) vulnerability CWE-352	7.1	High	2026-09-17
CVE-2026-45212	WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerability CWE-862	5.3	Medium	2026-05-12
CVE-2024-53738	WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability CWE-918	4.4	Medium	2024-11-30
CVE-2024-43314	WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability CWE-862	4.3	Medium	2024-11-01
CVE-2021-24983	Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action CWE-79	6.1	-	2022-02-01
CVE-2021-24937	Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting CWE-79	6.1	-	2022-02-01

All 8 known CVE vulnerabilities affecting Asset CleanUp: Page Speed Booster with full Chinese analysis, references, and POCs where available.