plugin

Publish Confirm Message Vulnerabilities

2 known security issues reported for the Publish Confirm Message WordPress plugin. Most recent disclosed Oct 12, 2023.

1 medium

Running Publish Confirm Message on your site? Check whether your installed version is affected.

Scan your site free

Publish Confirm Message [publish-confirm-message] < 2.0

unknown

[en] Cross-Site Request Forgery (CSRF) vulnerability in Arul Prasad J Publish Confirm Message plugin <= 1.3.1 versions.

Affected:: up to 2.0
Fixed in:: 2.0
Disclosed:: Oct 12, 2023

CVE-2023-32124 on NVD →

Publish Confirm Message <= 1.3.1 - Cross-Site Request Forgery

medium

The Publish Confirm Message plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the adminMenu() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged reques...

CVSS:: 4.3
Affected:: up to 1.3.1
Fixed in:: 2.0
Disclosed:: Oct 3, 2023

CVE-2023-32124 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database