CVE-2023-6385: medium-severity vulnerability in WordPress Ping Optimizer
WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.2%
The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected products
Unknown · WordPress Ping OptimizerRelated CVEs — WordPress Ping Optimizer
In the same product, most dangerous first.