CVE-2023-25967: falha de média gravidade em PeepSo Community by PeepSo
WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.3%
Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo plugin <= 6.0.2.0 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
PeepSo · Community by PeepSoCVEs relacionadas — PeepSo Community by PeepSo
No mesmo produto, das mais perigosas para as menos.
CVE-2023-27630MEDIUMWordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information DisclosureEPSS 0.5%CVE-2024-25923MEDIUMWordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerabilityEPSS 0.4%CVE-2026-66668HIGHWordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-31251MEDIUMWordPress Community by PeepSo plugin <= 6.3.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%