CVE-2023-28688 — WordPress TH Variation Swatches plugin <= 1.2.7 - Cross-Site Request Forgery (CSRF) vulnerability

CVE-2023-28688

WordPress TH Variation Swatches plugin <= 1.2.7 - Cross-Site Request Forgery (CSRF) vulnerability PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through 1.2.7.

Affected (CNA)

Vendor / product	Versions
ThemeHunk / TH Variation Swatches	affected n/a through 1.2.7

CWE

CWE-352

References

https://patchstack.com/database/wordpress/plugin/th-variation-swatches/vulnerability/wordpress-th-variation-swatches-plugin-1-2-7-multiple-vulnerabilities?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.