Description
WordPress Plugin RapidLoad Power-Up for Autoptimize is prone to multiple vulnerabilities, including security bypass and cross-site request forgery vulnerabilities. Exploiting these issues could allow an attacker to perform otherwise restricted actions and subsequently modify the plugins cache, add a new license, delete logs files, update cache rules, or to perform certain administrative actions and gain unauthorized access to the affected application. WordPress Plugin RapidLoad Power-Up for Autoptimize version 1.7.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.7.2 or latest
References
Related Vulnerabilities
WordPress Plugin Catchers Helpdesk and Ticket system for Support Cross-Site Scripting (1.0.3)
WordPress Plugin Titan Anti-spam & Security Security Bypass (7.3.0)
WordPress Plugin Security & Malware scan by CleanTalk Security Bypass (2.50)
MySQL CVE-2019-2740 Vulnerability (CVE-2019-2740)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-9788)