What is GHSA-j28j-9pgq-m442?

GHSA-j28j-9pgq-m442 is a security advisory published by GitHub Security Advisories with Medium severity. The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which...

Which CVE IDs does GHSA-j28j-9pgq-m442 cover?

GHSA-j28j-9pgq-m442 covers the following CVE IDs: CVE-2026-82195. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j28j-9pgq-m442?

GHSA-j28j-9pgq-m442 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-j28j-9pgq-m442MediumCVSS 6.5

The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-82195 →

📋 Description

The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing that secret to unauthenticated visitors and letting them delete it repeatedly, preventing an administrator from completing a legitimate connection.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82195
https://wpscan.com/vulnerability/c6e4763e-e4db-4318-9631-06ee7426f3ae
https://github.com/advisories/GHSA-j28j-9pgq-m442