title: Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import
description: The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: Seraphinite Accelerator
versions:
status: affected, versionType: semver, version: 0, lessThan: 2.20.32
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}