CVE-2023-1068

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the read_more_excerpt_link_menu_options() function. This makes it possible for unauthenticated attackers to update he plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/changeset/2871098/read-more-excerpt-link/trunk/read-more-excerpt-link.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0359434b-9d88-4a40-8e9f-ec354c8de816?source=cve
• https://plugins.trac.wordpress.org/changeset/2871098/read-more-excerpt-link/trunk/read-more-excerpt-link.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0359434b-9d88-4a40-8e9f-ec354c8de816Third Party Advisory

Published

Feb 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1061A vulnerability, which was classified as critical, has been …8.8
• CVE-2023-1062A vulnerability, which was classified as critical, was found…8.8
• CVE-2023-1063A vulnerability has been found in SourceCodester Doctors App…8.8
• CVE-2023-1064Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1065This vulnerability in the Snyk Kubernetes Monitor can result…5.3
• CVE-2023-1067Cross-site Scripting (XSS) - Stored in GitHub repository pim…5.4
• CVE-2023-1069The Complianz WordPress plugin before 6.4.2, Complianz Premi…5.4
• CVE-2023-1070External Control of File Name or Path in GitHub repository n…7.1
• CVE-2023-1071An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1072An issue has been discovered in GitLab affecting all version…5.3
• CVE-2023-1073A memory corruption flaw was found in the Linux kernel’s hum…6.6
• CVE-2023-1074A memory leak flaw was found in the Linux kernel's Stream Co…5.5