Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-23974

WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

Description

Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fullworks Quick Event Manager

Default version status: unaffected

  • n/a to ≤ 9.7.4affected

References