PT-2023-32175 · 10Web · 10Web Booster

Krzysztof Zając · CVE-2023-5559 · Publicado 2023-11-27 · Atualizado 2025-09-23

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions 10Web Booster WordPress plugin versions prior to 2.24.18

Description The issue allows unauthenticated users to delete arbitrary options from the database, leading to denial of service, due to the lack of validation of the option name given to some AJAX actions.

Recommendations For versions prior to 2.24.18, update to version 2.24.18 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-5559

Produtos afetados

10Web Booster

Referências · 4

• 🔥 https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf · Exploit
• https://osv.dev/vulnerability/CVE-2023-5559 · Aviso do Fabricante
• https://twitter.com/pdnuclei_bot/status/1970473259712819285 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-5559 · Nota de Segurança