CVE-2023-35089

MediumCVSS 4.3

Published: 17/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

The Zip Recipes plugin versions <= 8.0.7 contains a Cross-Site Request Forgery (CSRF) vulnerability that can be exploited to perform unauthorized actions on behalf of the user.

Risk Assessment

An attacker could exploit this vulnerability to carry out unauthorized operations on the user's account, potentially leading to data loss or unauthorized access.

Recommendation

It is recommended to update the Zip Recipes plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.7 versions.