Skip to content
Sign in
7.3 High

CVE-2023-5934 The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place…

Description

The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when importing settings from the v1, which could allow attackers to make a logged in admin update some settings via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Travelpayouts: All Travel Brands in One Place 1.1 earliest → < 1.1.13 1.1.13

Other CVEs of Travelpayouts: All Travel Brands in One Place

The 3 CVEs of Travelpayouts: All Travel Brands in One Place →
CVE-2023-5932 The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a… 4.8 Medium CVE-2024-0337 The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due… 6.1 Medium
Track this CVE