Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2334

The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack

Published

2025-05-15T20:15:24.957

Last Modified

2025-06-11T19:26:52.290

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application westerndeal easy_digital_downloads_google_sheet_connector < 1.6.6 Yes
Application gsheetconnector edd_gsheetconnector < 1.4 Yes
References