CVE-2023-6385

The WordPress Ping Optimizer plugin (versions through 2.35.1.3.0 ) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw due to missing CSRF checks in certain areas. This allows an attacker to trick a logged-in user—such as an administrator—into performing unwanted actions, specifically clear...

CVE-2022-1591

CVE-2022-1591 affects the WordPress Ping Optimizer plugin for WordPress, versions prior to 2.35.1.3.0. The issue is a lack of CSRF protection when updating plugin settings, which could allow an attacker to induce a logged-in admin to change settings via a CSRF attack. The available connected sour...

CVE-2022-30705

Summary: CVE-2022-30705 affects the WordPress Ping Optimizer plugin by Pankaj Jha, with CSRF in versions <= 2.35.1.2.3. The issue stems from cross-site request forgery handling in the plugin’s admin actions. Impact (as stated): potential CSRF exploitation leading to unauthorized actions within...