Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F95CB064-EEF1-4210-BDF3-93661CA36F9C
HistoryMar 10, 2023 - 12:00 a.m.

RapidLoad Power-Up for Autoptimize < 1.7.2 - Unauthorised AJAX Calls

2023-03-1000:00:00
wpscan.com
7
plugin
authorisation
csrf
ajax
logs
subscriber
attacks

0.001 Low

EPSS

Percentile

32.2%

The plugin does not have authorisation and CSRF checks in various AJAX actions (such as deleting logs files etc), allowing them to be called by any authenticated users, such a subscriber or via CSRF attacks

CPENameOperatorVersion
unusedcsslt1.7.2

0.001 Low

EPSS

Percentile

32.2%

Related for WPVDB-ID:F95CB064-EEF1-4210-BDF3-93661CA36F9C