CVE-2023-6390

CVE-2023-6390 is a CSRF vulnerability in WordPress Users plugin (version <= 1.4) where updating settings is not protected by CSRF checks, potentially allowing a logged-in admin to change settings via CSRF. The issue is documented across multiple sources, and no public patch/version fix is conf...

WordPress WordPress Users Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Users Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-6390 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bb99fc7992d2 Credits Daniel Ruf Required...