CVE-2023-2334

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published: May 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-233427.1If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented.CVE-2023-233436.1A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque la CVE-2023-233446.5A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.CVE-2023-233467.1HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality a CVE-2023-233477.1HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality CVE-2023-233485.5HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.CVE-2023-233492.2Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled cr CVE-2023-23357.5Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows CVE-2023-233548.7A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabili CVE-2023-233557.2An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows re CVE-2023-233567.2A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could CVE-2023-233574.8A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabili