CVE-2023-49155: WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Published Dec 18, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8.
Affected Software
1 affected component
Wow-Company Button Generator WordPress<=2.3.8
Event History
Dec 18, 2023
CVE Published
via MITRE·10:13 PM
Data Sourced
via MITRE·10:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-49155?
CVE-2023-49155 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2023-49155?
To fix CVE-2023-49155, update the Wow-Company Button Generator plugin to a version above 2.3.8.
3
Which versions of the Button Generator are affected by CVE-2023-49155?
CVE-2023-49155 affects the Wow-Company Button Generator plugin versions up to and including 2.3.8.
4
What is the impact of CVE-2023-49155?
CVE-2023-49155 allows malicious actors to execute unauthorized requests on behalf of authenticated users.
5
Who is affected by CVE-2023-49155?
Users of the Wow-Company Button Generator plugin for WordPress versions 2.3.8 and earlier are affected by CVE-2023-49155.