CVE-2021-24430

CVE-2021-24430 is a Remote Code Execution (RCE) vulnerability affecting the Speed Booster Pack WordPress plugin prior to version 4.2.0. The vulnerability stems from insufficient validation of caching_exclude_urls and caching_include_query_strings settings, allowing for malicious code injection into a PHP file. With a CVSS score of 7.2 (HIGH), this flaw can be exploited by a high-privileged attacker over the network, leading to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.