URL Shortener by MyThemeShop

URL Shortener by MyThemeShop <=1.0.17 - CSRF

LANACOMMONVDB ID: 92e097ff-c54b-480c-ae1e-fe5e2ae46737

The plugin does not have proper Cross-Site Request Forgery (CSRF) check in some places, which could allow attackers to make logged in admins perform unwanted actions via Cross-Site Request Forgery (CSRF) attacks.

References

Source Code: https://wordpress.org/plugins/mts-url-shortener/

CVE: CVE-2023-23896

Attributes

Catgory: WordPress Plugin

Discovered: 2022-08-26

Published: 2023-01-19

Affected Version: <= 1.0.17

Classification

Type: Cross-Site Request Forgery (CSRF)

Researcher

Name: István Márton

Email: [email protected]