Lucene search
PRIOn knowledge basePRION:CVE-2023-1623HistoryApr 24, 2023 - 7:15 p.m.
Cross site request forgery (csrf)
2023-04-2419:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site request forgery
csrf
wordpress
vulnerability
custom post type ui
nvd
admin
email
exploit
The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| custom_post_type_ui | lt | 1.13.5 |
Related
nvd
nvd
CVE-2023-1623
2023-04-24 19:15:09
cve
cve
CVE-2023-1623
2023-04-24 19:15:09
openvas
openvas
WordPress Custom Post Type UI Plugin < 1.13.5 CSRF Vulnerability
2023-09-21 00:00:00
cvelist
cvelist
CVE-2023-1623 Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF
2023-04-24 18:31:01
wordfence
wordfence