The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d | Exploit Third Party Advisory |
Configurations
History
16 Jan 2025, 15:44
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:s-sols:seraphinite_accelerator:*:*:*:*:*:wordpress:*:* | |
First Time |
S-sols
S-sols seraphinite Accelerator |
21 Nov 2024, 08:42
Type | Values Removed | Values Added |
---|---|---|
References | () https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d - Exploit, Third Party Advisory |
02 Dec 2023, 04:35
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:seraphinitesolutions:seraphinite_accelerator:*:*:*:*:*:wordpress:*:* | |
References | () https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d - Exploit, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
CWE | CWE-862 |
27 Nov 2023, 19:03
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-11-27 17:15
Updated : 2025-01-16 15:44
NVD link : CVE-2023-5611
Mitre link : CVE-2023-5611
CVE.ORG link : CVE-2023-5611
JSON object : View
Products Affected
s-sols
- seraphinite_accelerator
CWE
CWE-862
Missing Authorization