CVE-2023-47775

Summary

CVE-2023-47775 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the wpDiscuz plugin, specifically versions 7.6.11 and below, used in the gVectors Team Comments system. A CSRF attacker can trick a user into making unintended actions on a web application, such as changing settings or initiating transactions, by exploiting their session. This vulnerability puts all users who have the affected plugin installed and enabled on their WordPress websites at risk. To mitigate this issue, it is recommended that users immediately update their wpDiscuz plugin to a version that is not affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.