CVE-2023-23974: WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published Mar 1, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update).
Affected Software
1 affected component
Fullworksplugins Quick Event Manager Wordpress<9.7.5
Remediation
Information
Update to 9.7.5 or a higher version.
Event History
Mar 1, 2023
CVE Published
via MITRE·12:33 PM
Data Sourced
via MITRE·12:33 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this CSRF vulnerability?
The vulnerability ID of this CSRF vulnerability is CVE-2023-23974.
2
What is the severity level of CVE-2023-23974?
CVE-2023-23974 has a severity level of medium.
3
Which version of Fullworks Quick Event Manager plugin is affected by CVE-2023-23974?
Fullworks Quick Event Manager plugin version <= 9.7.4 is affected by CVE-2023-23974.
4
What actions are affected by CVE-2023-23974?
All registration actions such as delete, delete all, edit, and update are affected by CVE-2023-23974.
5
How can I fix CVE-2023-23974?
To fix CVE-2023-23974, update Fullworks Quick Event Manager plugin to version 9.7.5 or later.