CVE-2023-52119: WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

Q: What is the severity of CVE-2023-52119?

CVE-2023-52119 has a medium severity rating due to its potential for Cross-Site Request Forgery (CSRF) attacks.

Q: How do I fix CVE-2023-52119?

To fix CVE-2023-52119, update the Icegram Engage plugin to version 3.1.19 or later.

Q: What systems are affected by CVE-2023-52119?

CVE-2023-52119 affects versions of Icegram Engage for WordPress up to and including 3.1.18.

Q: What type of vulnerability is CVE-2023-52119?

CVE-2023-52119 is a Cross-Site Request Forgery (CSRF) vulnerability.

Q: Can CVE-2023-52119 lead to data compromise?

Yes, CVE-2023-52119 can potentially allow an attacker to perform unauthorized actions on behalf of a victim user.

Published Jan 5, 2024

Updated

Cross-Site Request Forgery (CSRF) vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building.This issue affects Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building: from n/a through 3.1.18.

Affected Software

1 affected component

Icegram Icegram Engage WordPress<=3.1.18

Remediation

Information

Update to 3.1.19 or a higher version.

Event History

Jan 5, 2024

CVE Published

via MITRE·09:28 AM

Data Sourced

via MITRE·09:28 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-52119?

CVE-2023-52119 has a medium severity rating due to its potential for Cross-Site Request Forgery (CSRF) attacks.

How do I fix CVE-2023-52119?

To fix CVE-2023-52119, update the Icegram Engage plugin to version 3.1.19 or later.

What systems are affected by CVE-2023-52119?