title: Speed Booster Pack 4.2.0-beta - Authenticated (admin+) RCE
description: The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings settings before outputting them in a PHP file, which could lead to RCE
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
product: Speed Booster Pack ⚡ PageSpeed Optimization Suite
vendor: Unknown
versions:
lessThan: 4.2.0-beta*, status: affected, version: 4.2.0-beta, versionType: custom
lessThan: 4.2.0, status: affected, version: 4.2.0, versionType: custom
}