ZeroHour

CVE-2023-6385

PoC
CVSS 3.1
4.3 medium
EPSS
<1%p13
Published
()
Modified
Description

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs.

Vendors
wordpress ping optimizer project
Products
wordpress ping optimizer
Ecosystems
WordPress
Weakness
CWE-352
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

In the news

No ingested article mentions this CVE yet.