CVE-2023-51378

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) vulnerability in Rise Themes Rise Blocks – A Complete Gutenberg Page Builder.This issue affects Rise Blocks – A Complete Gutenberg Page Builder: from n/a through 3.1.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
Rise Themes	Rise Blocks – A Complete Gutenberg Page Builder	<= 3.1

References

Timeline

Published: Dec 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-513794.9An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improp CVE-2023-51386.8Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.CVE-2023-513804.3An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperl CVE-2023-513845.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified CVE-2023-513856.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is refere CVE-2023-513863.3Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based CVE-2023-513878.8Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions CVE-2023-513889.8Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function CVE-2023-513899.8Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse yml content, but no se CVE-2023-51397.8Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver CVE-2023-513907.5journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journal CVE-2023-513917.5A bug in Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing - potentially allowing a device cras