CSRF Vulnerability in Ping Optimizer Plugin Could Allow Attackers to Trigger Unwanted Actions

CVE-2023-6385
Currently unrated 🤨

Key Information

Vendor
WordPress
Status
WordPress Ping Optimizer
Vendor
CVE Published:
10 April 2024

Summary

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs.

Affected Version(s)

WordPress Ping Optimizer <= 2.35.1.3.0

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database

Credit

Jan W Oleju
WPScan
.