← CVE Intelligence

CVE-2023-5006

WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF PUBLISHED

Description (CNA)

The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.

Affected (CNA)

Vendor / productVersions
Unknown / WP Discord Inviteaffected 0 before 2.5.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.