NetSight
medium4.3

CVE-2023-25989

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Play…

Impact

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.

Affected products

VendorProductAffected versions
MekshqMeks Audio Player
through 1.2
MekshqMeks Easy Ads Widget
through 2.0.7
MekshqMeks Easy Maps
through 2.1.3
MekshqMeks Easy Photo Feed Widget
through 1.2.7
MekshqMeks Simple Flickr Widget
through 1.2
MekshqMeks Smart Author Widget
through 1.1.3
MekshqMeks Smart Social Widget
through 1.6
MekshqMeks Themeforest Smart Widget
through 1.4
MekshqMeks Time Ago
through 1.1.6
MekshqMeks Video Importer
through 1.0.10

Weakness classification

References