CVE-2023-35044

MediumCVSS 4.3

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

The Securimage-WP plugin versions up to 3.6.16 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of a logged-in user.

Risk Assessment

Organizations using this plugin may be exposed to unauthorized operations, potentially leading to data loss or compromise of user accounts.

Recommendation

It is recommended to update the Securimage-WP plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in Drew Phillips Securimage-WP plugin <= 3.6.16 versions.