Lucene search
+L
CreatomaticCsprite

1 matches found

CVE
CVE
added 2023/12/18 10:28 p.m.77 views

CVE-2023-49763

CVE-2023-49763 : WordPress plugin CSprite (by Creatomatic) <= 1.1 is vulnerable to Cross-Site Request Forgery (CSRF) . The issue is due to insufficient nonce validation, enabling unauthenticated attackers to potentially trigger actions by convincing an admin to perform a forged request. Public...

8.8CVSS8.5AI score0.00294EPSS
Save