CVE-2023-31216: WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published Jul 17, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <= 2.6.0 versions.
Affected Software
1 affected component
ultimatemember Ultimate Member Wordpress<=2.6.0
Remediation
Information
Update to 2.6.1 or a higher version.
Event History
Jul 17, 2023
CVE Published
via MITRE·01:50 PM
Data Sourced
via MITRE·01:50 PM
RemedyDescriptionSeverityWeakness
Data Sourced
02:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-31216?
CVE-2023-31216 is a Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin versions <= 2.6.0.
2
How severe is CVE-2023-31216?
CVE-2023-31216 has a severity rating of 8.8, which is considered high.
3
What software versions are affected by CVE-2023-31216?
The Ultimate Member plugin versions up to and including 2.6.0 are affected by CVE-2023-31216.
4
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that tricks the victim into submitting a malicious request, often through social engineering or exploiting vulnerabilities in a trusted website.
5
How can I fix CVE-2023-31216?
To fix CVE-2023-31216, upgrade to a version of the Ultimate Member plugin that is higher than 2.6.0.