CVE-2023-5803
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 30, 2023
Updated: Dec 6, 2023
CWE ID 352
Summary
CVE-2023-5803: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Business Directory Plugin – Easy Listing Directories for WordPress. This issue enables attackers to manipulate user actions on affected websites, potentially leading to unauthorized data modifications or other unintended consequences. The vulnerability affects all versions of the plugin from n/a through 6.3.10. Users are strongly encouraged to update to the latest version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share