Leadster Marketing Conversacional Vulnerabilities

The Leadster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the leadster_script_code_action function. This makes it possible for unauthenticated attackers to modify the leadester script code via a forged r...

CVSS:

4.3

Affected:

up to 1.1.2

Fixed in:

1.1.3

Disclosed:

Nov 16, 2023

CVE-2023-47791 on NVD →

The Leadster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing nonce validation on the leadster_script_code_action() function hooked via 'admin_post'. This makes it possible for unauthenticated attackers to update the plugin's script code vi...

CVSS:

4.3

Affected:

up to 1.1.2

Fixed in:

1.1.3

Disclosed:

Sep 4, 2023

CVE-2023-41668 on NVD →