CVE-2023-5611 Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

2023-11-2716:22:05

WPScan

www.cve.org

seraphinite accelerator

wordpress plugin

unauthorised settings

csrf checks

vulnerability

cve-2023-5611

0.001 Low

EPSS

Percentile

30.3%

JSON

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Seraphinite Accelerator",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.20.32"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

References

wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d

0.001 Low

EPSS

Percentile

30.3%

JSON

Related for CVELIST:CVE-2023-5611