Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitJan W OlejuWPEX-ID:362C56FF-85EB-480F-A825-9670D4C0E3D0
HistoryMar 20, 2024 - 12:00 a.m.

WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF

2024-03-2000:00:00
Jan W Oleju
66
wordpress
ping optimizer
csrf
vulnerability
admin
url
exploit

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs.

Make a logged in admin open the URL below

https://example.com/wp-admin/options-general.php?page=wordpress-ping-optimizer/cbnet-ping-optimizer.php&d=yes

Related

nvd 1
vulnrichment 1
wpvulndb 1
cvelist 1
cve 1
nvd
nvd
CVE-2023-6385
2024-04-10 05:15:47
vulnrichment
vulnrichment
CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
2024-04-10 05:00:02
wpvulndb
wpvulndb
WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
2024-03-20 00:00:00
cvelist
cvelist
CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
2024-04-10 05:00:02
cve
cve
CVE-2023-6385
2024-04-10 05:15:47

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

JSON
Related for WPEX-ID:362C56FF-85EB-480F-A825-9670D4C0E3D0
nvd1vulnrichment1wpvulndb1cvelist1cve1