CVE-2023-5611

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.27% chance of exploitation in the next 30 days, 19th percentile

Published

2023-11-27

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d

References

• CVE Record
• NVD entry

Related

• CVE-2023-5610
• CVE-2023-5612
• CVE-2023-5609
• CVE-2023-5618
• CVE-2023-5605
• CVE-2023-5620