BerqWP Vulnerabilities and Affected Products
Vulnerabilities associated with BerqWP.
Products
Clear product- BerqWP2 vulnerabilities
- BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-58979MEDIUM | WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control VulnerabilityMissing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through <= 2.2.53. CWE-862Sep 9, 2025 | CVSS5.3v3.1 | EPSS0.218% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-43160CRITICAL | WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerabilityUnrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6. | CVSS10.0v3.1 | EPSS4.62% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |