CVE-2023-5975
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Nov 7, 2023
Updated: Nov 14, 2023
CWE ID 352
Summary
CVE-2023-5975: The ImageMapper plugin for WordPress, versions up to 1.2.6, suffers from a Cross-Site Request Forgery (CSRF) vulnerability. This issue arises due to insufficient or missing nonce validation on multiple functions. As a result, unauthenticated attackers can exploit this flaw to manipulate plugin settings by inducing administrators to execute malicious requests, typically through crafted links.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share