Lucene search
+L

4 matches found

NVD
NVD
•added 2023/11/27 5:15 p.m.•35 views

CVE-2023-5559

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service...

9.1CVSS0.02788EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/11/27 4:22 p.m.•45 views

CVE-2023-5559 10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service...

9.3AI score0.02788EPSS
SaveExploits2References1
CVE
CVE
•added 2023/11/27 4:22 p.m.•125 views

CVE-2023-5559

The 10Web Booster WordPress plugin, in versions prior to 2.24.18 , is vulnerable to a design flaw where it fails to validate the option name provided during certain AJAX actions . This oversight allows unauthenticated users to delete arbitrary options directly from the database, which can result ...

9.1CVSS9.2AI score0.02788EPSS
SaveIn wildExploits2References1Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2023/10/29 12:00 a.m.•10 views

VulnCheck KEV: CVE-2023-5559

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service...

9.1CVSS7.4AI score0.02788EPSS
SaveIn wildExploits2References2
Rows per page
Query Builder