Cross-Site Request Forgery in Clearfy Cache Optimization Plugin for WordPress

CVE-2024-13337

What is CVE-2024-13337?

The Clearfy Cache optimization plugin for WordPress is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability due to inadequate nonce validation on the 'setup-wbcr_clearfy' page. This flaw allows attackers to create deceptive requests that could manipulate the plugin's settings if they manage to lure an administrator into executing a specific action, such as clicking on a malicious link. All versions prior to 2.3.2 are impacted, emphasizing the need for timely updates to safeguard against potential exploitation.

References