PT-2023-16768 · WordPress · Wp-Optimize+1

Paolo Elia · Published 2023-07-10 · Updated 2025-01-06 · CVE-2023-1119

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP-Optimize WordPress plugin versions prior to 3.2.13 SrbTransLatin WordPress plugin versions prior to 2.4.1

Description The issue arises from the use of a third-party library that removes escaping on some HTML characters, leading to a cross-site scripting vulnerability. This allows for potential malicious script injection and execution.

Recommendations For WP-Optimize WordPress plugin versions prior to 3.2.13, update to version 3.2.13 or later. For SrbTransLatin WordPress plugin versions prior to 2.4.1, update to version 2.4.1 or later.

Exploit

Fix

Related Identifiers

CVE-2023-1119

Affected Products

Srbtranslatin

Wp-Optimize

References · 5

• 🔥 https://wpscan.com/vulnerability/2e78735a-a7fc-41fe-8284-45bf451eff06 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1119 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1119 · Vendor Advisory
• https://t.me/cibsecurity/66256 · Telegram Post
• https://t.me/cvenotify/56401 · Telegram Post