CVE-2023-1623 — Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF
The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers …
Published: 2023-04-24 · CVSS: 6.5 · CVSS 3.1
The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7