Vulnerabilities > Berqier

DATE CVE VULNERABILITY TITLE RISK
2024-10-02 CVE-2024-9344 Cross-site Scripting vulnerability in Berqier Berqwp
The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping.
network
low complexity
berqier CWE-79
6.1
2024-07-22 CVE-2024-37942 Server-Side Request Forgery (SSRF) vulnerability in Berqier Berqwp
Server-Side Request Forgery (SSRF) vulnerability in Berqier Ltd BerqWP.This issue affects BerqWP: from n/a through 1.7.5.
network
low complexity
berqier CWE-918
7.2