CVE-2023-37991

Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...

CVE-2023-37991

CVE-2023-37991 : A CSRF vulnerability exists in the WordPress plugin WP Emoji One (Monchito.Net) for versions ≤ 0.6.0. The issue is a missing CSRF check during settings updates, enabling unauthenticated or crafted requests to trigger admin actions when a logged-in user is targeted. Documented as ...

CVE-2023-37991 WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...

WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Emoji One Type Plugin Vulnerable versions = 0.6.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37991 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 799ab01968eb Credits Abdi Pranata Required...