CVE-2023-7196

MEDIUM 4.3CVE-2023-7196 · Published 15/05/2025 · updated 17/06/2026

In short

CVE-2023-7196 is a MEDIUM (CVSS 4.3) vulnerability affecting ultimate noindex nofollow tool (jonkemp).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 11.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ultimate noindex nofollow tool jonkemp	`≤ 1.1.2`	No fix yet

Description

The Ultimate Noindex Nofollow Tool WordPress plugin through 1.1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

References

wpscan.com/vulnerability/15ea1ffd-5a0c-422c-8c9c-7b632516a156 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free