CVE-2023-38390 WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

CVE-2023-38390

CVE-2023-38390 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Anshul Labs Mobile Address Bar Changer (versions ≤ 3.0). The issue arises from CSRF in the plugin’s settings update flow, allowing an unauthenticated attacker to induce a user to perform unintended actions...

CVE-2023-38390 WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Mobile Address Bar Changer Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-38390 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8cf3f99225d5 Credits Skalucy...