CVE-2023-46212

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2023-12-19

Last modified

2026-04-28

Weaknesses

CWE-352, CWE-862

Affected products

• Wp Extra (Tiencop)
• Wp Extra (Wpvnteam)

References

• https://patchstack.com/database/vulnerability/wp-extra/wordpress-wp-extra-plugin-6-2-broken-access-control-vulnerabilit…