CVE-2023-4013

Summary

CVE-2023-4013 is a vulnerability affecting the GDPR Cookie Compliance plugin for WordPress. The issue lies in the plugin's lack of Cross-Site Request Forgery (CSRF) protection during license management. An attacker can exploit this weakness by deceiving a logged-in administrator into updating or deactivating the plugin's license through a malicious request, potentially leading to unauthorized plugin modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.