Shirshak Roy

**Name of the Vulnerable Software and Affected Versions** 10Web Booster versions prior to 2.34.0 **Description** The plugin fails to restrict access to the routine responsible for issuing the shared secret used to authenticate cloud connections. This allows unauthenticated visitors to disclose the secret and delete it repeatedly, which prevents administrators from establishing a legitimate connection. **Recommendations** Update 10Web Booster to version 2.34.0 or later.