CVE-2023-25986

CVE-2023-25986 describes a Cross-Site Request Forgery (CSRF) in the WattIsIt PayGreen – Ancienne version plugin for WordPress, affected ≤ 4.10.2. Root cause is CSRF allowing unintended actions on authenticated sessions. In the public records, CVSS metrics differ by source, with high impact indica...

WordPress PayGreen Plugin <= 4.10.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software PayGreen Type Plugin Vulnerable versions = 4.10.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25986 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6c9947e1536c Credits Lokesh Dachepalli Required...