Headline
CVE-2023-22691: WordPress Category Specific RSS feed Subscription plugin <= v2.1 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack
Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.
Solution
Update the WordPress Category Specific RSS feed Subscription plugin to the latest available version (at least v2.2).
Found this useful? Thank yuyudhn for reporting this vulnerability. Buy a coffee ☕
yuyudhn discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Category Specific RSS feed Subscription Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version v2.2.
2 other known vulnerabilities for this pluginTo plugin page
Report to Patchstack Alliance bounty platform and earn monthly cash prizes.
Learn more