CVE-2023-4013

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published: Aug 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-401307.8In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to loc CVE-2023-401317.0In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg CVE-2023-401327.8In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missin CVE-2023-401335.5In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead CVE-2023-401343.3In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local inf CVE-2023-401353.3In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to CVE-2023-401363.3In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local CVE-2023-401373.3In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead CVE-2023-401383.3In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informati CVE-2023-401395.5In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informati CVE-2023-401407.8In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after fre CVE-2023-401417.8In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to