Aruba.it vulnerabilities

Products

• Aruba HiSpeed Cache 3
• Aruba Migration Tool 1

Latest Aruba.it CVEs

Newest publication first

1. CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability

   Published 2026-10-01

   Medium·CVSS 6.5 EPSS 0.33%

   Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

2. CVE-2026-23694 Aruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions

   Published 2026-02-23

   Medium·CVSS 5.1 EPSS 0.25%

   Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple administrative AJAX actions. The handlers for ahsc_reset_options, ahsc_debug_status, and ahsc_enable_purge perform authe...

3. CVE-2024-43119 WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability

   Published 2024-11-01

   Medium·CVSS 4.3 EPSS 0.49%

   Missing Authorization vulnerability in Aruba.It Aruba HiSpeed Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.12.

4. CVE-2023-44983 WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure

   Published 2023-12-19

   High·CVSS 7.5 EPSS 0.60%

   Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.