WordPress Plugin Vulnerabilities

Optimize Database after Deleting Revisions < 5.1 - Missing Authorization via 'odb_csv_download'

Description

The Optimize Database after Deleting Revisions plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 5.0.110. This is due to a missing capability check on the 'odb_csv_download' function which is hooked via admin_init. This makes it possible for unauthenticated attackers to trigger a download of the plugin's data.

Affects Plugins

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Timeline

Publicly Published
2023-10-03 (about 2 years ago)
Added
2023-12-07 (about 2 years ago)
Last Updated
2023-12-07 (about 2 years ago)

Other