Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-23975

WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AccessPress Themes Access Demo Importer (WordPress plugin)

  • <= 1.0.7 to ≤ 1.0.7affected

References