CVE-2023-6499

creationtimestamp| type| source ---|---|--- 2024-02-12 17:22:03+00:00| seen| https://t.me/ctinow/183276 2024-02-15 14:21:15+00:00| seen| https://t.me/ctinow/185537 2025-05-06 21:21:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15228...

CVE-2023-6499

CVE-2023-6499 affects the LasTunes WordPress plugin (

CVE-2023-6499 lasTunes <= 3.6.1 - Settings Update via CSRF

The lasTunes WordPress plugin through 3.6.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...