Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/04/24 6:31 p.m.30 views

CVE-2023-1623 Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF

The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack...

6.5AI score0.00352EPSS
SaveExploits1References1
Rows per page
Query Builder