Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-2271

Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF

Description

The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when deleting its shortcode, which could allow attackers to make logged in admins delete arbitrary shortcode via a CSRF attack

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Tiempo.com

Default version status: affected

  • 0 to ≤ 0.1.2affected

References