WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-47765

8.8HIGH

Key Information:

Vendor
WordPress
Status
CodeBard's Patron Button and Widgets for Patreon
Vendor
CVE Published:
22 November 2023

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in CodeBard's Patron Button and Widgets for Patreon plugin in versions up to 2.1.9. Attackers can exploit this vulnerability to perform unauthorized actions on behalf of authenticated users, potentially leading to malicious activities without user consent. This could compromise user data and application integrity, placing both users and the platform at risk.

Affected Version(s)

CodeBard's Patron Button and Widgets for Patreon <= 2.1.9

References

https://patchstack.com/database/vulnerability/patron-butt...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.