CVE-2023-41654

Cross-Site Request Forgery CSRF vulnerability in Andreas Heigl authLdap plugin = 2.5.8 versions...

CVE-2023-41654 WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Andreas Heigl authLdap plugin = 2.5.8 versions...

CVE-2023-41654

CVE-2023-41654 affects the WordPress plugin authLdap (versions &lt;= 2.5.8). The issue is a Cross-Site Request Forgery (CSRF) vulnerability due to missing CSRF protection when updating settings. A fix is available in version 2.5.9; upgrading to that version mitigates the vulnerability. Other conn...

WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software authLdap Type Plugin Vulnerable versions = 2.5.8 Fixed in 2.5.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41654 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID efe4321d7644 Credits Rio Darmawan Required...