WordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-27632

8.8HIGH

Key Information:

Vendor

WordPress
Status
Daily Prayer Time
Vendor
CVE Published:
12 November 2023

What is CVE-2023-27632?

The Daily Prayer Time plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability that affects versions up to 2023.03.08. This flaw allows an attacker to trick a logged-in user into submitting an unwanted request, potentially compromising the security of the user's account and manipulating the site's settings or content without the user's consent.

Affected Version(s)

Daily Prayer Time <= 2023.03.08

References

https://patchstack.com/database/vulnerability/daily-praye...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

yuyudhn (Patchstack Alliance)
.
CVE-2023-27632 : WordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF)