PT-2023-26240
CVE-2023-37995
·
Publicado
2023-10-04
·
Atualizado
2023-10-05
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Chetan Gole WP-CopyProtect plugin versions <= 3.1.0
Description
A Cross-Site Request Forgery (CSRF) issue affects the Chetan Gole WP-CopyProtect plugin. This allows an attacker to perform unintended actions on a user's account.
Recommendations
For Chetan Gole WP-CopyProtect plugin versions <= 3.1.0, update to a version higher than 3.1.0 to resolve the issue.
As a temporary workaround, consider restricting access to sensitive areas of the plugin to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾