8.8
CVSSv3

CVE-2023-2330

Published: 17/07/2023 Updated: 07/11/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The Caldera Forms Google Sheets Connector WordPress plugin prior to 1.3 does not have CSRF check when updating its Access Code, which could allow malicious users to make logged in admin change the access code to an arbitrary one via a CSRF attack

Vulnerable Product Search on Vulmon Subscribe to Product

gsheetconnector caldera forms google sheets connector