Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
added 2023/03/01 12:49 p.m.11 views

CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...

4.3CVSS6.6AI score0.00237EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/01 12:49 p.m.69 views

CVE-2023-23973

CVE-2023-23973 affects the WordPress plugin “a3rev Software Contact Us Page – Contact People” (versions &lt;= 3.7.0). The root cause is a CSRF weakness that allows creation and potentially manipulation of contact entries because no CSRF protection is present (unauthenticated access described in P...

6.5CVSS5.5AI score0.00237EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/01/20 12:0 a.m.16 views

WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Contact Us page - Contact people LITE Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23973 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 924b5ed1c57e Credi...

6.5CVSS7AI score0.00237EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder