CVE-2023-5611

5.3 mediumEPSS 0.3%

Medium (5.3) in s-sols seraphinite accelerator. EPSS 0.3% chance of exploitation in the next 30 days.

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2023-11-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

s-sols:seraphinite_accelerator

References

https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d
https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d

Check your stack JSON