Description
The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Seraphinite Accelerator | < 2.20.32 | 2.20.32 |
References
- https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d exploit vdb-entry technical-description