WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-34031

8.8HIGH

Key Information:

Vendor
WordPress
Status
Bbpress Toolkit
Vendor
CVE Published:
9 November 2023

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in versions of the bbPress Toolkit plugin by Pascal Casier that are equal to or below 1.0.12. This security flaw allows unauthorized commands to be transmitted from a user that the application trusts, potentially leading to unintended actions being performed on behalf of the user. Website administrators using the affected versions should take immediate steps to update the plugin to ensure their systems remain secure. For further details, please visit the provided reference link.

Affected Version(s)

bbPress Toolkit <= 1.0.12

References

https://patchstack.com/database/vulnerability/bbp-toolkit...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

thiennv (Patchstack Alliance)
.