Vulnerability CVE-2023-2842


Published: 2023-06-27

Description:
The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack

Type:

CWE-352

(Cross-Site Request Forgery (CSRF))

 References:
https://wpscan.com/vulnerability/0357ecc7-56f5-4843-a928-bf2d3ce75596

Copyright 2026, cxsecurity.com

 

Back to Top