PT-2025-16165 · WordPress · The Clearfy Cache

Name of the Vulnerable Software and Affected Versions: The Clearfy Cache – WordPress optimization plugin versions up to and including 2.3.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the wclearfy cache delete functionality. This...

WordPress plugin Clearfy Cache 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Clearfy Cache plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy' vulnerability

Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcrclearfy' vulnerability discovered by Whit Taylor in WordPress Plugin Clearfy Cache versions = 2.3.2...

CVE-2024-43260

Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clearfy Cache: from n/a through 2.2.4...

CVE-2024-43260

Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clearfy Cache: from n/a through 2.2.4...

CVE-2024-43260 WordPress Clearfy Cache plugin <= 2.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clearfy Cache: from n/a through 2.2.4...

CVE-2024-43260

CVE-2024-43260 refers to a Missing Authorization vulnerability in the WordPress plugin Clearfy Cache. Public sources indicate affected versions up to 2.2.4 and describe an incorrectly configured access control that could enable unauthorized access. The provided connected documents do not specify ...

CVE-2024-43260 WordPress Clearfy Cache plugin <= 2.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clearfy Cache: from n/a through 2.2.4...

PT-2024-30423 · Unknown · Clearfy Cache

Name of the Vulnerable Software and Affected Versions: Clearfy Cache versions 2.2.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Clearfy Cache versions...

WordPress plugin Clearfy Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Clearfy Cache plugin <= 2.2.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Clearfy Cache versions = 2.2.4...

WordPress Clearfy Cache Plugin <= 2.2.4 is vulnerable to Broken Access Control

Software Clearfy Cache Type Plugin Vulnerable versions = 2.2.4 Fixed in 2.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43260 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID de343d0c262e Credits Joshua Chan Required privilege...

CVE-2024-34806

Cross-Site Request Forgery CSRF vulnerability in Creative Motion Clearfy Cache.This issue affects Clearfy Cache: from n/a through 2.2.1...

CVE-2024-34806 WordPress Clearfy Cache plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Motion Clearfy Cache.This issue affects Clearfy Cache: from n/a through 2.2.1...

CVE-2024-34806

CVE-2024-34806 describes a Cross-Site Request Forgery in the WordPress Clearfy Cache plugin up to version 2.2.1 (per CVE entry). The vulnerability arises from missing or incorrect nonce validation, enabling unauthenticated attackers to trigger actions via forged requests if a site admin is tricke...

CVE-2024-34806 WordPress Clearfy Cache plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Motion Clearfy Cache.This issue affects Clearfy Cache: from n/a through 2.2.1...

WordPress plugin Clearfy Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Clearfy Cache plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Clearfy Cache versions = 2.3.2...

WordPress Clearfy Cache Plugin <= 2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Clearfy Cache Type Plugin Vulnerable versions = 2.2.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34806 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c26012cf3ac2 Credits Dhabaleshwar Das Requir...

Clearfy Cache < 2.0.5 - Reflected Cross-Site Scripting

The plugin does not escape some generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting When Disable assets manager on back-end" is off: https://example.com/wp-admin/admin.php?page=gonzales-wbcrclearfy&action=index&wbcrassetsmanager=1&a"alert/XSS/...