Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0498

The WP Education WordPress plugin before 1.2.7 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

Published

2023-03-27T16:15:08.697

Last Modified

2025-02-19T21:15:11.910

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hasthemes wp_education < 1.2.7 Yes
References