CVE-2023-41129: WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 18, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6.
Affected Software
1 affected component
Patreon Patreon Wordpress Wordpress<=1.8.6
Event History
Nov 18, 2023
CVE Published
via MITRE·10:16 PM
Data Sourced
via MITRE·10:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-41129.
2
What is the severity of CVE-2023-41129?
The severity of CVE-2023-41129 is high with a score of 8.8.
3
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application.
4
Which version of Patreon WordPress plugin is affected by this vulnerability?
The vulnerability affects Patreon WordPress plugin version up to and including 1.8.6.
5
How can I fix this vulnerability in Patreon WordPress plugin?
To fix this vulnerability, update the Patreon WordPress plugin to a version higher than 1.8.6.