CVE-2023-23899: hasthemes extensions for cf7 – CVSS 4.3 · Watchpost

← All vulnerabilities

CVE-2023-23899

보통 4.3CVE-2023-23899 · Published 17/02/2023 · updated 17/06/2026

요약

CVE-2023-23899은(는) extensions for cf7 (hasthemes)에 영향을 주는 보통 (CVSS 4.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.23%, 전체 취약점의 14.0%보다 높음.
조치: 2.0.9 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
extensions for cf7 hasthemes	`< 2.0.9`	`2.0.9`

Description

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation.

References

patchstack.com/database/vulnerability/extensions-for-cf7/wordpress-extensions-for-cf7-contact-form-7-database-conditional-fields-and-redirection-plugin-2-0-8-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

extensions for cf7의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free