Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-25989

Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

Description

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Meks Meks Video Importer

Default version status: unaffected

  • n/a to ≤ 1.0.10affected

Meks Meks Time Ago

Default version status: unaffected

  • n/a to ≤ 1.1.6affected

Meks Meks ThemeForest Smart Widget

Default version status: unaffected

  • n/a to ≤ 1.4affected

Meks Meks Smart Author Widget

Default version status: unaffected

  • n/a to ≤ 1.1.3affected

Meks Meks Audio Player

Default version status: unaffected

  • n/a to ≤ 1.2affected

Meks Meks Easy Maps

Default version status: unaffected

  • n/a to ≤ 2.1.3affected

Meks Meks Easy Photo Feed Widget

Default version status: unaffected

  • n/a to ≤ 1.2.7affected

Meks Meks Simple Flickr Widget

Default version status: unaffected

  • n/a to ≤ 1.2affected

Meks Meks Easy Ads Widget

Default version status: unaffected

  • n/a to ≤ 2.0.7affected

Meks Meks Smart Social Widget

Default version status: unaffected

  • n/a to ≤ 1.6affected

References