PT-2024-13853 · WordPress · Wp Discord Invite

Claudio Marchesini + 1 · Published 2024-01-17 · Updated 2024-01-24 · CVE-2023-5006

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WP Discord Invite WordPress plugin versions prior to 2.5.1

Description The issue allows an unauthenticated attacker to perform actions on behalf of a logged-in administrator by tricking them into submitting a crafted request, due to a lack of protection against CSRF attacks.

Recommendations For WP Discord Invite WordPress plugin versions prior to 2.5.1, update to version 2.5.1 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-5006

Affected Products

Wp Discord Invite

References · 5

• 🔥 https://wpscan.com/vulnerability/d29bcc1c-241b-4867-a0c8-4ae5f9d1c8e8 · Exploit
• https://osv.dev/vulnerability/CVE-2023-5006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5006 · Security Note
• https://t.me/cvenotify/68562 · Telegram Post
• https://twitter.com/CVEnew/status/1747630157441925225 · Twitter Post