The RapidLoad Power-Up for Autoptimize plugin, widely used by WordPress site administrators to boost website performance by optimizing CSS, was found to have a security flaw. This vulnerability, identified as CVE-2023-1346, allowed for a type of attack known as Cross-Site Request Forgery (CSRF).
In simple terms, a CSRF vulnerability means that an attacker could potentially trick a logged-in website administrator into performing an unintended action. For this particular flaw, if an administrator clicked on a specially crafted malicious link, the plugin’s cache could be cleared without their knowledge or consent.
CVE Details
Product: RapidLoad Power-Up for Autoptimize plugin for WordPress
Published: March 10, 2023
Severity: Medium (CVSS Score: 4.3)
Status: Analyzed
Affected Products
This Cross-Site Request Forgery (CSRF) vulnerability impacted versions of the RapidLoad Power-Up for Autoptimize plugin up to, and including, 1.7.1. Users running these versions were at risk.
Current Status
This vulnerability has been analyzed and a fix has been released. It is crucial for all users of the RapidLoad Power-Up for Autoptimize plugin to ensure their installation is updated to a patched version to prevent potential exploitation.
Severity Level
The vulnerability holds a Medium severity rating with a CVSS score of 4.3. While not critical, it presented a risk where attackers could disrupt website functionality by clearing the cache. This could lead to temporary performance degradation and potential user experience issues, though it typically does not allow for direct data theft or remote code execution.
Possible Solutions
The primary solution for this vulnerability is to update your RapidLoad Power-Up for Autoptimize plugin to a version beyond 1.7.1. The fix involved implementing proper nonce validation for various functions within the plugin, including the critical clear_page_cache function. Nonce validation adds a unique, one-time token to requests, ensuring that they originate from legitimate user actions within the site rather than from malicious external requests. Always ensure your WordPress plugins are kept up-to-date to benefit from the latest security patches.
References
https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php
https://www.wordfence.com/threat-intel/vulnerabilities/id/b228f8b1-dd68-41ee-bc49-6a62e5267233
