CVE-2023-6385
Assigner: WPScan
Published: 2024-04-10T05:00:02.214Z
State: PUBLISHED
title: WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
problemTypes: descriptions: description: CWE-352 Cross-Site Request Forgery (CSRF)
type: CWE
affected: vendor: Unknown
product: WordPress Ping Optimizer
versions: status: affected
versionType: semver
version: 0
lessThanOrEqual: 2.35.1.3.0
defaultStatus: affected
descriptions: value: The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs.
credits: value: Jan W Oleju
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator