CVE-2023-37992

Summary

CVE-2023-37992 is a Cross-Site Request Forgery (CSRF) vulnerability affecting versions 3.1.35 and below of the Smarty plugin by PressPage Entertainment Inc. for WordPress. This issue allows an attacker to manipulate a user's browser into making unintended actions on a web application, such as changing account settings or making unauthorized transactions, by tricking the user into clicking a specially crafted link. A successful attack could lead to significant data loss or unauthorized access to the affected WordPress site. Users are advised to update to the latest version of the Smarty plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.