Lucene search
WPScanCVELIST:CVE-2023-2330HistoryJul 17, 2023 - 1:29 p.m.
CVE-2023-2330 Caldera Forms Google Sheets Connector < 1.3 - Access Code Update via CSRF
2023-07-1713:29:57
WPScan
www.cve.org
cve-2023-2330
caldera forms
google sheets connector
csrf
wordpress
plugin
access code
vulnerability
attack
The Caldera Forms Google Sheets Connector WordPress plugin before 1.3 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack
CNA Affected
[
{
"vendor": "Unknown",
"product": "Caldera Forms Google Sheets Connector",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.3"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
prion
prion
Cross site request forgery (csrf)
2023-07-17 14:15:00
nvd
nvd
CVE-2023-2330
2023-07-17 14:15:09
cve
cve
CVE-2023-2330
2023-07-17 14:15:09
wordfence
wordfence