CVE-2023-23974

Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update).

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2023-03-01

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Quick Event Manager (Fullworks)
• Quick Event Manager (Fullworksplugins)

References

• https://patchstack.com/database/vulnerability/quick-event-manager/wordpress-quick-event-manager-plugin-9-7-4-cross-site…