CVE-2023-37973

Cross-Site Request Forgery CSRF vulnerability in David Pokorny Replace Word plugin = 2.1 versions...

CVE-2023-37973

CVE-2023-37973 represents a Cross-Site Request Forgery vulnerability in the WordPress plugin Replace Word, version <= 2.1. The available documents describe the issue as CSRF affecting that plugin, without detailing a vendor patch or fix. The NVD entry notes a high-severity vector with UI inter...

WordPress Replace Word Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Replace Word Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37973 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e429577cbba7 Credits Yuki Haruma Required...