CVE-2023-25706

2023-07-1113:15:09

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-25706

cross-site request forgery

csrf

pagup

wordpress

robots.txt

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

18.0%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Pagup WordPress Robots.Txt optimization plugin <= 1.4.5 versions.

Affected configurations

Vulners

NVD

Node

pagupbetter_robots.txtRange≤1.4.5

VendorProductVersionCPE
pagupbetter_robots\.txt*cpe:2.3:a:pagup:better_robots\.txt:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pagup	better_robots\.txt	*	cpe:2.3:a:pagup:better_robots\.txt::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "better-robots-txt",
    "product": "WordPress Robots.txt optimization",
    "vendor": "Pagup",
    "versions": [
      {
        "changes": [
          {
            "at": "1.4.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/better-robots-txt/wordpress-wordpress-robots-txt-optimization-xml-sitemap-website-traffic-seo-ranking-booster-plugin-1-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve