CVE-2023-37392

MediumCVSS 5.4

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

The WP Dummy Content Generator plugin by Deepak Anand versions <= 2.3.0 has a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

The organization is at risk of unauthorized access to data and performing unwanted operations by attackers. This could lead to data integrity loss and compromise of system security.

Recommendation

It is recommended to update the WP Dummy Content Generator plugin to the latest version to mitigate this vulnerability. Additionally, implementing CSRF protection mechanisms is advisable.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions.