Lucene search

CVE-2023-0685

🗓️ 08 Feb 2023 02:07:15Reported by [email protected]Type

The Wicked Folders WordPress plugin up to version 2.18.16 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax_unassign_folders function

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2023-0685	8 Feb 202301:03	–	cvelist
Prion	Cross site request forgery (csrf)	8 Feb 202302:15	–	prion
Vulnrichment	CVE-2023-0685	8 Feb 202301:03	–	vulnrichment
CVE	CVE-2023-0685	8 Feb 202302:15	–	cve
WPVulnDB	Wicked Folders < 2.18.17 - Folder Structure Update via CSRF	7 Feb 202300:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence CE Weekly Vulnerability Report (Feb 6, 2023 to Feb 12, 2023)	16 Feb 202315:21	–	wordfence

Nvd

Node

wickedplugins wicked_foldersRange≤2.18.16wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e52b27fa-10e8-43d0-be29-774c2f5487ae

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Feb 2023 02:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS34.3

EPSS0.00091