CVE-2026-82195 — 10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion

CVE-2026-82195

10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion PUBLISHED

Description (CNA)

The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing that secret to unauthenticated visitors and letting them delete it repeatedly, preventing an administrator from completing a legitimate connection.

Affected (CNA)

Vendor / product	Versions
Unknown / 10Web Booster	affected 0 before 2.34.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c6e4763e-e4db-4318-9631-06ee7426f3ae/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.