Cross-Site Request Forgery Vulnerability in Digital Publications Plugin for WordPress by Supsystic
CVE-2023-5756
5.4MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 9 December 2023
What is CVE-2023-5756?
The Digital Publications by Supsystic plugin for WordPress contains a vulnerability that allows unauthenticated attackers to exploit missing or incorrect nonce validation in the AJAX action handler. By crafting a forged request, these attackers can potentially trick site administrators into executing actions without their intent. This poses a risk to the integrity of affected WordPress sites, as it enables unauthorized operations that could compromise site security and user data.
Affected Version(s)
Digital Publications by Supsystic * <= 1.7.6