WordPress Page Builder with Image Map by AZEXO Plugin <= 1.27.133 is vulnerable to Cross Site Request Forgery (CSRF)

Low priority Mitigation unnecessary
<= 1.27.133Vulnerable version(s)
No official fix availableFixed version

Get the fastest vulnerability mitigation with Patchstack!

Get started

Risks

CVSS 6.3

6.3

Cross Site Request Forgery (CSRF)

This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Details

Have additional information or questions about this entry? Let us know.

Timeline

Reported byProfile ImageIstván Márton

5 Jun, 2023

Weekly WordPress security intelligence delivered to your inbox.