CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects WordPress. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2023-5559
Severity
CRITICAL
CVSS
9.1
EPSS
2.81%
WordPress
Original NVD Description
The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)