CVE-2023-2329

HIGH · CVSS 8.8 EPSS 0.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-2329

Severity

HIGH

CVSS

8.8

EPSS

0.39%

WordPress

Original NVD Description

The WooCommerce Google Sheet Connector WordPress plugin before 1.3.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack