CVE-2023-1333

Name of the Vulnerable Software and Affected Versions RapidLoad Power-Up for Autoptimize plugin for WordPress versions up to, and including, 1.7.1

Description The issue is related to a missing capability check on the clear page cache function, allowing authenticated attackers with subscriber-level access to delete the plugin's cache. This can lead to unauthorized loss of data.

Recommendations For versions up to, and including, 1.7.1, consider disabling the clear page cache function until a patch is available to prevent unauthorized cache deletion. Restrict access to the cache management functionality to minimize the risk of exploitation.