Lucene search
+L

3 matches found

CVE
CVE
added 2023/11/12 9:40 p.m.63 views

CVE-2023-28696

CVE-2023-28696 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin I Recommend This (also listed as Themeist I Recommend This) affecting versions up to 3.9.0. The issue arises from CSRF protection weaknesses in the plugin, enabling unauthorized actions on a user’s account...

8.8CVSS6.3AI score0.00321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/12 9:40 p.m.19 views

CVE-2023-28696 WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0...

4.3CVSS9AI score0.00321EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/03/22 12:0 a.m.12 views

WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software I Recommend This Type Plugin Vulnerable versions = 3.9.0 Fixed in 3.9.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28696 Patch priority Low CVSS severity Low 4.3 Developer Webtions Harish PSID 919c1961db79 Credits thiennv Required...

8.8CVSS6.6AI score0.00321EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder