CVE-2023-5611

Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

published November 27, 2023

CVSS
—
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00268 · 17.9th percentile
Published
2023-11-27T16:22Z
EPSS history
Timeline
  • 27 NOV 16:22Z
    Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import
    cvelistv5