CVE-2023-7125: Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF
The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on their wall in their profile page), which could allow attackers to make logged in users perform such action via a CSRF attack
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7125?
CVE-2023-7125 is classified as a high-severity vulnerability due to its ability to exploit CSRF attacks, potentially allowing unauthorized actions by logged-in users.
How do I fix CVE-2023-7125?
To fix CVE-2023-7125, update the Community by PeepSo WordPress plugin to version 6.3.1.2 or later.
What type of attack does CVE-2023-7125 allow?
CVE-2023-7125 allows attackers to execute Cross-Site Request Forgery (CSRF) attacks that can manipulate user actions without consent.
Who is affected by CVE-2023-7125?
Users of the Community by PeepSo WordPress plugin prior to version 6.3.1.2 are affected by CVE-2023-7125.
What action can be exploited due to CVE-2023-7125?
CVE-2023-7125 allows attackers to create user posts on behalf of logged-in users without their knowledge or consent.