CVE-2023-0496

Published: Mar 27, 2023Modified: Feb 14, 2025

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

The HT Event WordPress plugin before 1.4.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

Affected (1)

Products: Hasthemes: Ht Event

Hasthemes

1 product

Ht Event

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hasthemes Ht Event	Before 1.4.6

References (2)

https://wpscan.com/vulnerability/451b47d5-7bd2-4a82-9c8e-fe6601bcd2ab

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/451b47d5-7bd2-4a82-9c8e-fe6601bcd2ab

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.