CVE Database /
CVE-2023-23790
CVE · High
CVE-2023-23790 — Pods - Custom Content Types and Fields [pods] < 2.9.11
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-23790
|
Pods - Custom Content Types and Fields [pods] < 2.9.11 |
Cross-Site Request Forgery (CSRF) |
High
7.1
|
< 2.9.11
|
2.9.11 |
2023-01-20 |
—
|
CVE-2023-23790
The Pods plugin before version 2.9.11 contained a cross-site request forgery flaw that could enable an attacker to trick authenticated users with elevated privileges into performing unintended administrative actions, such as resetting passwords to gain unauthorized access to accounts. Researcher Rafshanzani Suhada identified and disclosed this vulnerability, which was patched in the 2.9.11 release.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings