CVE-2023-6390

Summary

CVE-2023-6390 is a vulnerability affecting the Users WordPress plugin before version 1.4. This issue allows attackers to execute malicious actions by exploiting the lack of Cross-Site Request Forgery (CSRF) protection during plugin settings updates. An attacker can trick an admin user into clicking a specially crafted link, leading to unauthorized modifications of plugin settings. This vulnerability poses a significant risk and highlights the importance of maintaining WordPress installations with up-to-date plugins.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.