CVE-2023-7083

The CVE-2023-7083 entry concerns the Voting Record WordPress plugin (≤2.0). The issue arises from missing CSRF checks in certain areas and lack of sanitisation/escaping, enabling a logged-in administrator to store XSS payloads via CSRF. The description notes potential Stored XSS through a CSRF at...

CVE-2023-7084

CVE-2023-7084 affects the Voting Record WordPress plugin up to version 2.0. It enables Stored XSS via authenticated users (e.g., subscribers) due to missing sanitisation and escaping in the voting data handling. The Wordfence Intelligence entry notes an unpatched status for this vulnerability, an...