CVE-2023-23992

Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2023-02-28

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Automatorwp (Automatorwp)

References

• https://patchstack.com/database/vulnerability/automatorwp/wordpress-automatorwp-the-most-flexible-and-powerful-no-code-…