Cross-Site Request Forgery Vulnerability in Clearfy Cache Plugin by WordPress

CVE-2024-13338

What is CVE-2024-13338?

The Clearfy Cache plugin for WordPress, which enhances site performance by optimizing caching, suffers from a Cross-Site Request Forgery vulnerability. This flaw arises from inadequate nonce validation in the wclearfy_cache_delete function, allowing attackers to potentially exploit it. By tricking an administrator into executing a malicious action, such as clicking on a deceptive link, an unauthenticated user could clear the cache without appropriate permissions, undermining the site's integrity.

References