Skip to content
Sign in
Not rated

CVE-2023-5611 The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting…

Description

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

Affected products and versions

Product Affected versions Fixed in
Seraphinite Accelerator 2.20 earliest → < 2.20.32 2.20.32

Other CVEs of Seraphinite Accelerator

The 4 CVEs of Seraphinite Accelerator →
CVE-2026-87828 The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its… 5.7 Medium CVE-2023-5610 The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated… Not rated CVE-2023-5609 The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it… Not rated
Track this CVE