| |
Vulnerability CVE-2023-5006
Published: 2024-01-17
| Description: |
The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request. |
References: |
https://wpscan.com/vulnerability/d29bcc1c-241b-4867-a0c8-4ae5f9d1c8e8
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
