WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-23719

8.8HIGH

Key Information:

Vendor
WordPress
Status
Premmerce
Vendor
CVE Published:
17 July 2023

Summary

A Cross-Site Request Forgery vulnerability has been identified in the Premmerce plugin for WordPress, specifically affecting versions up to 1.3.17. This vulnerability can allow an attacker to trick a victim into submitting unintended requests, potentially compromising the security of user accounts and sensitive information without the user's knowledge. It is essential for users to update to the latest version or implement safeguards to mitigate the risk associated with this vulnerability.

Affected Version(s)

Premmerce <= 1.3.17

References

https://patchstack.com/database/vulnerability/premmerce/w...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lana Codes (Patchstack Alliance)
.