CVE · Medium

CVE-2023-47875 — Perfmatters [perfmatters] < 2.1.7

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-47875 Perfmatters [perfmatters] < 2.1.7 Cross-Site Request Forgery (CSRF) Medium 5.4 < 2.1.7 2.1.7 2023-11-21

CVE-2023-47875

The Perfmatters plugin for WordPress before version 2.1.7 contains a cross-site request forgery vulnerability stemming from inadequate nonce verification in an unspecified function. An unauthenticated attacker could exploit this flaw by deceiving a site administrator into clicking a malicious link, potentially allowing the attacker to execute unauthorized actions on the affected site. The specific consequences of this vulnerability remain undisclosed.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.