Skip to content
OpenAdvisories
Unscored CVE-2022-1591 EUVD-2022-24881GHSA-q32v-53r7-3hqv

WordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRF

Published Sep 19, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WordPress Ping Optimizer WordPress plugin before 2.35.1.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products

VendorProductAffectedFixed
— WordPress Ping Optimizer 2.35.1.3.0 – < 2.35.1.3.0 2.35.1.3.0

References