CVE Vulnerabilities

CVE-2023-5559

Published: Nov 27, 2023 | Modified: Nov 30, 2023

CVSS 3.x

9.1

CRITICAL

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-5559
CWE	https://cwe.mitre.org/data/definitions/.html

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.

Affected Software

Name	Vendor	Start Version	End Version
10web_booster	10web	*	2.24.18 (excluding)

References

https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.