CVE-2023-23984: WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published Mar 1, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion.
Affected Software
1 affected component
Wow-Company Bubble Menu WordPress<3.0.2
Remediation
Information
Update to 3.0.2 or a higher version.
Event History
Mar 1, 2023
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-23984?
CVE-2023-23984 is a Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu - circle floating menu plugin <= 3.0.1 leading to form deletion.
2
What software is affected by CVE-2023-23984?
Wow-Company Bubble Menu - circle floating menu plugin version up to and including 3.0.1.
3
How severe is CVE-2023-23984?
CVE-2023-23984 has a severity rating of medium (5.4).
4
What is the Common Weakness Enumeration (CWE) associated with CVE-2023-23984?
CVE-2023-23984 is associated with CWE-352.
5
How can I fix CVE-2023-23984?
To fix CVE-2023-23984, update Wow-Company Bubble Menu - circle floating menu plugin to version 3.0.2 or above.