CVE-2023-34029: WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnera

WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Status

Published

2023-07-11

Updated

2026-04-28

Assigning organization

Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin <= 2.3.3 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications

Default version status: unaffected

n/a to ≤ 2.3.3affected

References

https://patchstack.com/database/vulnerability/disable-update-notifications/wordpress-disable-wordpress-update-notifications-and-auto-update-email-notifications-plugin-2-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve ↗