{"basis":"claimed","id":"CVE-2023-5559","name":"10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion","vendorProject":"Unknown","product":"10Web Booster","publishedAt":"2023-11-27","cvss":null,"exploited":null,"epss":{"score":0.02788,"percentile":0.86412,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-01-20","daysToRule":785},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion","description":"The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.","cwes":[],"vendors":[{"vendor":"cloudflare","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2026-01-20","firstIsNew":true,"daysToRule":785,"daysAtMost":null,"freePlan":false,"claims":[{"id":"c3dd0a1dc20bd65b64a6a6cd4bea08ad78384475114bf2486c15996869d12fbc","cve_id":"CVE-2023-5559","vendor":"f5","product":"Attack signatures","rule_id":"200012098","rule_name":"WordPress 10Web Booster DoS","change":"new","default_action":null,"published_on":"2026-01-20","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200012098 \"WordPress 10Web Booster DoS\" (Denial of Service, risk High), systems: WordPress. References: CVE-2023-5559.","first_seen_at":"2026-11-02T21:00:24.865Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:15:26.211Z","cvssVector":null,"ssvc":null,"measured":[{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 1, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:02:57.000Z","verdict":"passed","templateId":"CVE-2023-5559","templatePath":"http/cves/2023/CVE-2023-5559.yaml","requests":3,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"GET","path":"/wp-json","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/wp-admin/admin-ajax.php","status":200,"blocked":false,"rules":[]},{"method":"GET","path":"/wp-json","status":200,"blocked":false,"rules":[]}]},{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 2, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:03:28.000Z","verdict":"passed","templateId":"CVE-2023-5559","templatePath":"http/cves/2023/CVE-2023-5559.yaml","requests":3,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"GET","path":"/wp-json","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/wp-admin/admin-ajax.php","status":200,"blocked":false,"rules":[]},{"method":"GET","path":"/wp-json","status":200,"blocked":false,"rules":[]}]}],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}