PT-2025-13508 · WordPress · Wp Database Optimizer

Nabil Irawan · Published 2025-03-28 · Updated 2025-03-28 · CVE-2025-31474

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP Database Optimizer versions 1.2.1.3 and earlier

Description A Cross-Site Request Forgery (CSRF) issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, as an attacker could potentially manipulate user interactions with the application.

Recommendations For WP Database Optimizer versions 1.2.1.3 and earlier, consider implementing proper CSRF token validation to prevent unauthorized requests. As a temporary workaround, restrict access to sensitive functionality that may be exploited through CSRF attacks until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-31474

Affected Products

Wp Database Optimizer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-31474 · Security Note
• https://t.me/cvedetector/21419 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/wp-database-optimizer/vulnerability/wordpress-wp-database-optimizer-1-2-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/wp-database-optimizer/vulnerability/wordpress-wp-database-optimizer-1-2-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1905674383051653478 · Twitter Post
• https://t.me/cvetracker/20177 · Telegram Post