CVE-2023-2330

Summary

CVE-2023-2330 is a vulnerability affecting the Caldera Forms Google Sheets Connector plugin for WordPress. Before version 1.3, this plugin fails to implement Cross-Site Request Forgery (CSRF) protections when updating its Access Code. As a result, attackers can manipulate the Access Code of the plugin, allowing them to make unauthorized changes as a logged-in admin, thus posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.