CVE-2023-23899
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Modified - audit@patchstack.com
- Published
- 2023-02-17
- Last modified
- 2026-04-28
- Weaknesses
- CWE-352
Affected products
- Conditional Fields And Redirection (Hasthemes)
- Extensions For Cf7 (Hasthemes)
- Extensions For Cf7 Contact Form 7 Database (Hasthemes)
References
- https://patchstack.com/database/vulnerability/extensions-for-cf7/wordpress-extensions-for-cf7-contact-form-7-database-c…
