medium4.3
CVE-2023-7195
The WP-Reply Notify WordPress plugin through 1.1 does not have a CSRF check in place when updating its settings, which could allow attackers to make a logged-i…
Impact
The WP-Reply Notify WordPress plugin through 1.1 does not have a CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ani2life | Wp-Reply Notify | through 1.1 |