CVE-2023-25989CWE-352

Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

Medium · published October 3, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-10-03T11:00Z
EPSS history
Timeline
  • 03 OCT 11:00Z
    Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks
    cvelistv5