← CVE Intelligence

CVE-2023-25989

Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.

Affected (CNA)

Vendor / productVersions
Meks / Meks Video Importeraffected n/a through 1.0.10
Meks / Meks Time Agoaffected n/a through 1.1.6
Meks / Meks ThemeForest Smart Widgetaffected n/a through 1.4
Meks / Meks Smart Author Widgetaffected n/a through 1.1.3
Meks / Meks Audio Playeraffected n/a through 1.2
Meks / Meks Easy Mapsaffected n/a through 2.1.3
Meks / Meks Easy Photo Feed Widgetaffected n/a through 1.2.7
Meks / Meks Simple Flickr Widgetaffected n/a through 1.2
Meks / Meks Easy Ads Widgetaffected n/a through 2.0.7
Meks / Meks Smart Social Widgetaffected n/a through 1.6

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.