WordPress Plugin Vulnerabilities

HT Feed < 1.2.8 - Cross-Site Request Forgery

Description

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Feed plugin <= 1.2.7 versions.

Affects Plugins

Plugin icon
ht-instagram
Fixed in 1.2.8

References

CVE
CVE-2023-23804

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Lana Codes
Verified
No
WPVDB ID
9b2a0645-84f0-441c-8854-2c59cd569ee0

Timeline

Publicly Published
2023-07-10 (about 2 years ago)
Added
2023-07-10 (about 2 years ago)
Last Updated
2023-07-10 (about 2 years ago)

Other

Published
Title
Published
2024-01-03
Title
WP Plugin Lister <= 2.1.0 - Settings Update to Stored XSS via CSRF
Published
2023-02-28
Title
WP TFeed <= 1.6.9 - Delete cache via CSRF
Published
2025-06-19
Title
JobWP < 2.4.1 - Cross-Site Request Forgery
Published
2024-04-04
Title
LearnPress – WordPress LMS Plugin < 4.0.1 - Cross-Site Request Forgery to Privilege Escalation
Published
2024-09-10
Title
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings Update