CVE-2023-6946 — Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF

CVE-2023-6946

Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF PUBLISHED

Description (CNA)

The Autotitle for WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

Affected (CNA)

Vendor / product	Versions
Unknown / Autotitle for WordPress	affected 0 through 1.0.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/54a00416-c7e3-44f3-8dd2-ed9e748055e6/
https://magos-securitas.com/txt/CVE-2023-6946

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/54a00416-c7e3-44f3-8dd2-ed9e748055e6/
https://magos-securitas.com/txt/CVE-2023-6946

CISA-ADP

No English description supplied.

No references supplied.