Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-5823
HistoryNov 06, 2023 - 11:21 a.m.

CVE-2023-5823 WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)

2023-11-0611:21:53
CWE-352
Patchstack
www.cve.org
cve-2023-5823
wordpress
google fonts
gdpr compliant
csrf
themekraft

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Cross-Site Request Forgery (CSRF) vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin <=Β 2.2.11 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "tk-google-fonts",
    "product": "TK Google Fonts GDPR Compliant",
    "vendor": "ThemeKraft",
    "versions": [
      {
        "changes": [
          {
            "at": "2.2.12",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.2.11",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Related for CVELIST:CVE-2023-5823