WordPress Plugin Vulnerabilities

Responsive Vertical Icon Menu < 1.5.9 - Theme Deletion via CSRF

Description

The plugin does not have CSRF check when deleting themes managed by the plugin, which could allow attackers to make logged in admins perform such action via a CSRF attack

Affects Plugins

Plugin icon
wpdevart-vertical-menu
Fixed in 1.5.9

References

CVE
CVE-2023-23983

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
yuyudhn
Verified
No
WPVDB ID
cf418a63-2541-42d7-8c12-e2db90a50ba5

Timeline

Publicly Published
2023-02-28 (about 3 years ago)
Added
2023-02-28 (about 3 years ago)
Last Updated
2023-02-28 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
LiveOptim 1.1.3 - Configuration Setting Manipulation CSRF
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF
Published
2023-10-16
Title
Stout Google Calendar <= 1.2.3 - Arbitrary Settings Update via CSRF
Published
2023-09-29
Title
WP Captcha <= 2.0.0 - Settings Update via CSRF
Published
2024-09-10
Title
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings Update