CVE-2023-0086

The CVE-2023-0086 entry concerns the WordPress JetWidgets for Elementor plugin. A CSRF vulnerability exists in versions up to 1.0.12 due to missing nonce validation on the save() function, allowing unauthenticated attackers to forge requests to modify plugin settings if a site admin interacts wit...

WordPress JetWidgets For Elementor Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)

Software JetWidgets For Elementor Type Plugin Vulnerable versions = 1.0.12 Fixed in 1.0.13 OWASP Top 10 A8: Cross Site Request Forgery CSRF Classification Cross Site Request Forgery CSRF CVE CVE-2023-0086 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8656a01af81e Credits...