CVE-2023-41694

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) vulnerability in Realbig Team Realbig For WordPress plugin <= 1.0.3 versions.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Oct 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-416958.8Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.CVE-2023-416978.8Cross-Site Request Forgery (CSRF) vulnerability in Nikunj Soni Easy WP Cleaner plugin <= 1.9 versions.CVE-2023-416996.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet ImplementatiCVE-2023-41704.8A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the cCVE-2023-417036.1User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when workCVE-2023-417046.1Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine. Malicious script cCVE-2023-417056.5Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load.CVE-2023-417066.5Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. AvCVE-2023-417076.5Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing loadCVE-2023-417085.4References to the "app loader" functionality could contain redirects to unexpected locations. Attackers could forge app references that bypaCVE-2023-41715.3A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This vulnerability afCVE-2023-417105.4User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when adding it to DOM. Attacke
CVE-2023-41694: High severity, CVSS 8.8 | Vulnix