CVE-2023-32594 WordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

2023-11-0921:02:48

CWE-352

Patchstack

www.cve.org

wordpress

hyphenator plugin

5.1.5

csrf

vulnerability

AI Score

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin <= 5.1.5 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "hyphenator",
    "product": "Hyphenator",
    "vendor": "Benedict B., Maciej Gryniuk",
    "versions": [
      {
        "lessThanOrEqual": "5.1.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]