Webcraftic Clearfy WordPress Optimization Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Webcraftic Clearfy WordPress optimization plugin, specifically in versions through 2.3.1. The issue arises from inadequate nonce validation in the 'wclearfy_cache_delete' function, allowing unauthenticated attackers to clear the cache by sending a forged request, provided they can persuade a site administrator to click a link.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can trick a user into performing actions they did not intend to, such as clearing the cache on a WordPress site.

Remediation

Users are advised to update the Clearfy Cache WordPress optimization plugin to version 2.3.2 or a newer patched version.