CVE-2023-2334 — Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF

CVE-2023-2334

Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF PUBLISHED

Description (CNA)

The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack

Affected (CNA)

Vendor / product	Versions
Unknown / edd-google-sheet-connector-pro	affected 0 before 1.4
Unknown / Easy Digital Downloads Google Sheet Connector	affected 0 before 1.6.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/95562684-2bb1-46f0-838c-8501db6b43ed/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.