Lucene search

CVE-2023-0086

🗓️ 05 Jan 2023 17:09:15Reported by WordfenceType

JetWidgets for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forger

Reporter	Title	Published	Views	Family All 6
WPVulnDB	JetWidgets for Elementor < 1.0.13 - Settings Update via CSRF	4 Jan 202300:00	–	wpvulndb
Vulnrichment	CVE-2023-0086	5 Jan 202316:21	–	vulnrichment
Patchstack	WordPress JetWidgets For Elementor Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)	5 Jan 202300:00	–	patchstack
NVD	CVE-2023-0086	5 Jan 202317:15	–	nvd
Cvelist	CVE-2023-0086	5 Jan 202316:21	–	cvelist
Prion	Cross site scripting	5 Jan 202317:15	–	prion

Nvd

Vulners

Node

crocoblock jetwidgets_for_elementorRange≤1.0.12wordpress

[
  {
    "vendor": "jetmonsters",
    "product": "JetWidgets For Elementor",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.0.12",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8de3d3c7-bde2-4455-8d60-20307f0a53ee
plugins	www.plugins.trac.wordpress.org/browser/jetwidgets-for-elementor/trunk/includes/class-jet-widgets-settings.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jan 2023 17:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS35.4 - 6.5

EPSS0.00067

SSVC