CVE-2023-5611

Name of the Vulnerable Software and Affected Versions Seraphinite Accelerator WordPress plugin versions prior to 2.20.32

Description The issue concerns a lack of authorization and CSRF checks in the Seraphinite Accelerator WordPress plugin when resetting and importing its settings. This allows unauthenticated users to reset the settings.

Recommendations For versions prior to 2.20.32, update to version 2.20.32 or later to resolve the issue. As a temporary workaround, consider restricting access to the settings reset and import functionality until the update is applied.