{"id":"CVE-2023-5559","state":"PUBLISHED","title":"10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion","description":"The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.","publishedAt":"2023-11-27T16:22:06.218Z","updatedAt":"2024-08-02T07:59:44.808Z","severity":null,"assigner":"WPScan","products":["Unknown 10Web Booster"],"affected":[{"vendor":"Unknown","product":"10Web Booster","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.24.18","versionType":"semver"}],"collectionURL":"https://wordpress.org/plugins"}],"references":["https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/5xxx/CVE-2023-5559.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5559","state":"PUBLISHED","datePublished":"2023-11-27T16:22:06.218Z","dateUpdated":"2024-08-02T07:59:44.808Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2023-10-12T14:55:58.100Z"},"containers":{"cna":{"title":"10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion","descriptions":[{"lang":"en","value":"The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service."}],"affected":[{"vendor":"Unknown","product":"10Web Booster","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.24.18","versionType":"semver"}],"collectionURL":"https://wordpress.org/plugins"}],"references":[{"url":"https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2023-11-27T16:22:06.218Z"},"credits":[{"lang":"en","value":"Krzysztof Zając","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf","tags":["exploit","vdb-entry","technical-description","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T07:59:44.808Z"}}]}}}