Lucene search
+L

4 matches found

NVD
NVD
added 2023/10/06 3:15 p.m.33 views

CVE-2023-41654

Cross-Site Request Forgery CSRF vulnerability in Andreas Heigl authLdap plugin = 2.5.8 versions...

8.8CVSS6.5AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/06 2:36 p.m.61 views

CVE-2023-41654

CVE-2023-41654 affects the WordPress plugin authLdap (versions <= 2.5.8). The issue is a Cross-Site Request Forgery (CSRF) vulnerability due to missing CSRF protection when updating settings. A fix is available in version 2.5.9; upgrading to that version mitigates the vulnerability. Other conn...

8.8CVSS7AI score0.00204EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/06 2:36 p.m.42 views

CVE-2023-41654 WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Andreas Heigl authLdap plugin = 2.5.8 versions...

5.4CVSS9AI score0.00204EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/09/01 12:0 a.m.12 views

WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software authLdap Type Plugin Vulnerable versions = 2.5.8 Fixed in 2.5.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41654 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID efe4321d7644 Credits Rio Darmawan Required...

8.8CVSS6.6AI score0.00204EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder