WordPress Plugin Vulnerabilities

Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery

Description

Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin <= 1.6.1 versions.

Affects Plugins

Plugin icon
google-mobile-sitemap
No known fix

References

CVE
CVE-2023-23869
URL
https://patchstack.com/database/vulnerability/google-mobile-sitemap/wordpress-google-xml-sitemap-for-mobile-plugin-1-6-1-cross-site-request-forgery-csrf-vulnerability

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Mika
Verified
No
WPVDB ID
74118147-e615-4227-90b7-d39a85494bb1

Timeline

Publicly Published
2023-03-20 (about 3 years ago)
Added
2023-07-10 (about 2 years ago)
Last Updated
2023-07-10 (about 2 years ago)

Other

Published
Title
Published
2022-05-04
Title
Code Snippets Extended <= 1.4.7 - RCE via CSRF
Published
2023-08-11
Title
WP HTML Mail < 3.4.2 - Test Email Sending via CSRF
Published
2024-04-22
Title
WP ADA Compliance Check Basic – Most Comprehensive Web Accessibility Solution for WordPress < 3.1.4 - Cross-Site Request Forgery
Published
2014-08-01
Title
ShareThis 7.0.3 - Setting Manipulation CSRF
Published
2023-11-23
Title
Simple Testimonials Showcase <= 1.1.5 - Cross-Site Request Forgery