CVE Daily

CVE-2023-5559

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option n...

Critical CVSS 9.1

Overview

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.

CWE: N/A Published: 2023-11-27T17:15:08.927
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.1 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags