CVE-2023-47757

ALTO 8.8CVE-2023-47757 · Published 17/11/2023 · updated 17/06/2026

In breve

CVE-2023-47757 è una vulnerabilità ALTO (CVSS 8.8) che riguarda aweber (aweber).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.24%, superiore al 15.0% delle vulnerabilità.
Correzione: aggiornare a 7.3.10 o successiva.

Package	Affected versions	Patched versions
aweber aweber	`< 7.3.10`	`7.3.10`

Description

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Accessing Functionality Not Properly Constrained by ACLs, Cross-Site Request Forgery.This issue affects AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth: from n/a through 7.3.9.

References

patchstack.com/database/vulnerability/aweber-web-form-widget/wordpress-aweber-plugin-7-3-9-broken-access-control-vulnerability · Third Party Advisory

Altre vulnerabilità di aweber

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free