Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2023-25989

Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • meks-video-importer

    through 1.0.10

  • meks-time-ago

    through 1.1.6

  • meks-themeforest-smart-widget

    through 1.4

  • meks-smart-author-widget

    through 1.1.3

  • meks-audio-player

    through 1.2

  • meks-easy-maps

    through 2.1.3

  • meks-easy-instagram-widget

    through 1.2.7

  • meks-simple-flickr-widget

    through 1.2

  • meks-easy-ads-widget

    through 2.0.7

  • meks-smart-social-widget

    through 1.6

References 10

patchstack.com