CVE-2023-5006
17.01.2024, 15:15
The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.
| Vendor | Product | Version |
|---|---|---|
| sarveshmrao | wp_discord_invite | 𝑥 < 2.5.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration