Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-5559

10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

Description

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown 10Web Booster

Default version status: unaffected

  • 0 to < 2.24.18affected

References