WordPress security by component

WordPress Ping Optimizer

Plugin description

WordPress Ping Optimizer is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Apr 10, 2024; the highest CVE/CNA score is 5.4.

Plugin slug: wordpress-ping-optimizer

Latest vulnerability

CVE-2023-6385: WordPress Ping Optimizer: Cross-site request forgery

WordPress Ping Optimizer is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedApr 10, 2024

Safe version guidanceSee mitigation notes

		Safe version
Apr 10, 2024	CVE-2023-6385 WordPress Ping Optimizer: Cross-site request forgery WordPress Ping Optimizer is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVDPending
Mar 27, 2023	CVE-2022-30705 Wordpress Ping Optimizer: Cross-site request forgery Wordpress Ping Optimizer is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE5.4 NVD8.8
Sep 19, 2022	CVE-2022-1591 WordPress Ping Optimizer: Cross-site request forgery WordPress Ping Optimizer is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD4.3