PT-2023-22064 · WordPress · Wpmet Wp Ultimate Review

Mika · Published 2023-11-12 · Updated 2023-11-16 · CVE-2023-28987

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wpmet Wp Ultimate Review plugin versions prior to 2.0.3

Description A Cross-Site Request Forgery (CSRF) issue affects the Wpmet Wp Ultimate Review plugin. This issue allows an attacker to perform unintended actions on a user's behalf.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-28987

Affected Products

Wpmet Wp Ultimate Review

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-28987 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28987 · Vendor Advisory
• https://patchstack.com/database/vulnerability/wp-ultimate-review/wordpress-wp-ultimate-review-plugin-2-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note