CVE-2023-22691: WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)
First published: Wed May 03 2023(Updated: )
Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tipsandtricks-hq Category Specific Rss Feed Subscription | <2.2 |
Remedy
Update to v2.2 or a higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-22691?
CVE-2023-22691 is a Cross-Site Request Forgery (CSRF) vulnerability in the Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.
How severe is CVE-2023-22691?
CVE-2023-22691 has a severity level of high (8.8).
Which software versions are affected by CVE-2023-22691?
CVE-2023-22691 affects Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin up to (but not including) version 2.2.
What is the Common Weakness Enumeration (CWE) for CVE-2023-22691?
CVE-2023-22691 is associated with CWE-352 (Cross-Site Request Forgery).
Where can I find more information about CVE-2023-22691?
More information about CVE-2023-22691 can be found at: [https://patchstack.com/database/vulnerability/category-specific-rss-feed-menu/wordpress-category-specific-rss-feed-subscription-plugin-v2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve](https://patchstack.com/database/vulnerability/category-specific-rss-feed-menu/wordpress-category-specific-rss-feed-subscription-plugin-v2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve)
- collector/nvd-latest
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/description
- agent/tags
- agent/event
- vendor/tipsandtricks-hq
- canonical/tipsandtricks-hq category specific rss feed subscription