EUVD-2023-50838

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

CSRF vulnerability in David Stöckl Custom Header Images plugin versions up to 1.2.1 detected

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin Custom Header Images Security Vulnerability	13 Nov 202300:00	–	cnnvd
CVE	CVE-2023-46636	13 Nov 202300:20	–	cve
Cvelist	CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	13 Nov 202300:20	–	cvelist
NVD	CVE-2023-46636	13 Nov 202301:15	–	nvd
Patchstack	WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	25 Oct 202300:00	–	patchstack
Prion	Cross site request forgery (csrf)	13 Nov 202301:15	–	prion
Positive Technologies	PT-2023-30129 · WordPress · David Stöckl Custom Header Images	13 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	13 Nov 202300:20	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 23, 2023 to October 29, 2023)	2 Nov 202318:40	–	wordfence
WPVulnDB	Custom Header Images <= 1.2.1 - Cross-Site Request Forgery	23 Nov 202300:00	–	wpvulndb

[
  {
    "enisaIdVendor": [
      {
        "id": "3ae72677-9c74-3273-8f7d-fdd119f7282f",
        "vendor": {
          "name": "David Stockl"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "e36267f8-c8ae-3c7a-a5a8-ed4a68eaad20",
        "product": {
          "name": "Custom Header Images"
        },
        "product_version": "n/a ≤1.2.1"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/custom-header-images/wordpress-custom-header-images-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability

03 Oct 2025 20:07Current

9High risk

Vulners AI Score9

CVSS 3.15.4 - 8.8

EPSS0.00053

SSVC