PT-2023-16314

CVE-2023-0502

·

Published

2023-03-27

·

Updated

2023-03-30

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions WP News WordPress plugin versions 1.1.9 and earlier
Description The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF attack.
Recommendations For WP News WordPress plugin versions 1.1.9 and earlier, update to a version that includes a CSRF check for plugin activation to prevent this issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2023-0502
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com