CVE-2023-25967: WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 3, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo plugin <= 6.0.2.0 versions.
Affected Software
1 affected component
PeepSo PeepSo WordPress<6.0.3.0
Remediation
Information
Update to 6.0.3.0 or a higher version.
Event History
May 3, 2023
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-25967?
CVE-2023-25967 is a Cross-Site Request Forgery (CSRF) vulnerability found in the PeepSo Community by PeepSo plugin, versions <= 6.0.2.0.
2
How severe is CVE-2023-25967?
CVE-2023-25967 has a severity score of 8.8 which is considered high.
3
What software is affected by CVE-2023-25967?
PeepSo Community by PeepSo plugin, versions <= 6.0.2.0, is affected by CVE-2023-25967.
4
What is the Common Weakness Enumeration (CWE) for CVE-2023-25967?
The Common Weakness Enumeration (CWE) for CVE-2023-25967 is CWE-352.
5
How can I fix CVE-2023-25967?
To fix CVE-2023-25967, it is recommended to update the PeepSo Community by PeepSo plugin to version 6.0.3.0 or higher.