W3SPEEDSTER

W3SPEEDSTER has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (75%). Other recurring categories include Eval Injection.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all W3SPEEDSTER vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-23765

W3SPEEDSTER <= 7.33 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2025-01-16 00:00	W3SPEEDSTER <= 7.33 - Cross-Site Request Forgery to Stored Cross-Site Scripting W3SPEEDSTER <= 7.33	`CVE-2025-23765`	6.1 Medium	thiennv	No
2024-11-11 00:00	W3SPEEDSTER <= 7.25 - Cross-Site Request Forgery W3SPEEDSTER <= 7.25	`CVE-2024-52392`	4.3 Medium	Le Ngoc Anh	Yes
2024-10-29 00:00	W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution W3SPEEDSTER <= 7.26	`CVE-2024-8512`	9.1 Critical	Lesor101	Yes
2024-01-31 00:00	W3SPEEDSTER <= 7.19 - Cross-Site Request Forgery via launch W3SPEEDSTER <= 7.19	`CVE-2024-24708`	4.3 Medium	Nguyen Xuan Chien	Yes

Showing 1–4 of 4 reports