WP Tabs by ShapedPlugin

WP Tabs by ShapedPlugin <= 2.1.14 - CSRF

LANACOMMONVDB ID: 13620bca-04b7-4982-bcf6-4a9f17bd5ae1

The plugin does not have proper Cross-Site Request Forgery (CSRF) check in some places, for example when importing shortcodes, which could allow attackers to make logged in admins perform unwanted actions via Cross-Site Request Forgery (CSRF) attacks.

References

Source Code: https://wordpress.org/plugins/wp-expand-tabs-free/

CVE: CVE-2023-25065

Attributes

Catgory: WordPress Plugin

Discovered: 2022-10-03

Published: 2023-02-02

Affected Version: <= 2.1.14

Classification

Type: Cross-Site Request Forgery (CSRF)

Researcher

Name: István Márton

Email: [email protected]