CVE-2023-41129: WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
First published: Sat Nov 18 2023(Updated: )
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Patreon Patreon Wordpress | <=1.8.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-41129.
What is the severity of CVE-2023-41129?
The severity of CVE-2023-41129 is high with a score of 8.8.
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application.
Which version of Patreon WordPress plugin is affected by this vulnerability?
The vulnerability affects Patreon WordPress plugin version up to and including 1.8.6.
How can I fix this vulnerability in Patreon WordPress plugin?
To fix this vulnerability, update the Patreon WordPress plugin to a version higher than 1.8.6.
- collector/mitre-cve
- collector/nvd-api
- vendor/patreon
- canonical/patreon patreon wordpress
- version/patreon patreon wordpress/1.8.6