WordPress plugin
WP Clean Up security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All WP Clean Up vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery via wp_clean_up_optimize ≤1.2.3No patch available | CVE-2023-25034 |
- Medium4.3Cross-Site Request Forgery via wp_clean_up_optimize
≤1.2.3No patch available
WP Clean Up: common questions
Does WP Clean Up have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WP Clean Up: 1 medium. At least one is not fixed in the latest version.
How do I check which version of WP Clean Up I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Clean Up vulnerability?
CVE-2023-25034, published Mar 3, 2023: WP Clean Up <= 1.2.3 - Cross-Site Request Forgery via wp_clean_up_optimize. Severity: Medium (CVSS 4.3).
Is any WP Clean Up vulnerability listed in CISA KEV?
No. None of the known WP Clean Up vulnerabilities is currently listed in the CISA KEV catalog.