CVE-2023-40008

CVE-2023-40008 affects the Gangesh Matta Simple Org Chart WordPress plugin, with CSRF in versions prior to 2.3.4. The Red Hat entry, NVD, and other sources corroborate a Cross-Site Request Forgery vulnerability present in plugin versions

CVE-2023-40603

CVE-2023-40603 affects the WordPress plugin Simple Org Chart (versions up to and including 2.3.4). The root cause is Missing Authorization (Broken Access Control) allowing unauthenticated access to tree settings. The vulnerability is currently unpatched in the sources provided (no fixed version i...

CVE-2023-28791

CVE-2023-28791 concerns WordPress plugin Simple Org Chart (versions ≤ 2.3.4). The connected documents indicate a CSRF vulnerability in the plugin’s settings update mechanism caused by missing CSRF checks, enabling an attacker to trigger admin actions via CSRF when a user is authenticated. Impact ...