CVE-2023-51522: WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability
Published Mar 15, 2024
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from n/a through 2.10.4.
Affected Software
3 affected components
Cozmoslabs Paid Membership Subscriptions Wordpress<=2.10.4
Cozmoslabs Paid Member Subscriptions>n/a, <=2.10.4
WordPress Paid Membership Subscriptions<=2.10.4
Remediation
Information
Update to 2.10.5 or a higher version.
Event History
Mar 15, 2024
CVE Published
via MITRE·02:21 PM
Data Sourced
via MITRE·02:21 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-51522?
CVE-2023-51522 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2023-51522?
To fix CVE-2023-51522, update the Paid Member Subscriptions plugin to version 2.10.5 or later.
3
Which software versions are affected by CVE-2023-51522?
CVE-2023-51522 affects Paid Member Subscriptions versions from n/a through 2.10.4.
4
What type of vulnerability is CVE-2023-51522?
CVE-2023-51522 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Who is the vendor of the affected software for CVE-2023-51522?
The vendor of the affected software for CVE-2023-51522 is Cozmoslabs.