2 matches found
CVE-2023-2352
CVE-2023-2352 concerns the CHP Ads Block Detector WordPress plugin. The WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation in the chp_abd_action function, affecting versions up to and including 3.9.4. This allows unauthenticated attackers to ...
CVE-2023-2352 CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action
The CHP Ads Block Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.9.4. This is due to missing or incorrect nonce validation on the chpabdaction function. This makes it possible for unauthenticated attackers to update or reset plugin...