PT-2023-32175 · 10Web · 10Web Booster

Krzysztof Zając · Published 2023-11-27 · Updated 2025-09-23 · CVE-2023-5559

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions 10Web Booster WordPress plugin versions prior to 2.24.18

Description The issue allows unauthenticated users to delete arbitrary options from the database, leading to denial of service, due to the lack of validation of the option name given to some AJAX actions.

Recommendations For versions prior to 2.24.18, update to version 2.24.18 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2023-5559

Affected Products

10Web Booster

References · 4

• 🔥 https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf · Exploit
• https://osv.dev/vulnerability/CVE-2023-5559 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5559 · Security Note
• https://twitter.com/pdnuclei_bot/status/1970473259712819285 · Twitter Post