Strix
26.1K

CVE-2023-25989

HIGHCVSS 8.8/10EPSS 0.38%

Last modified

CVE-2023-25989 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.

Description

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Probability
0.38%

29.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
MekshqMeks Audio Player<= 1.2
MekshqMeks Easy Ads Widget<= 2.0.7
MekshqMeks Easy Maps<= 2.1.3
MekshqMeks Easy Photo Feed Widget<= 1.2.7
MekshqMeks Simple Flickr Widget<= 1.2
MekshqMeks Smart Author Widget<= 1.1.3
MekshqMeks Smart Social Widget<= 1.6
MekshqMeks Themeforest Smart Widget<= 1.4
MekshqMeks Time Ago<= 1.1.6
MekshqMeks Video Importer<= 1.0.10

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-25989?
Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.
How severe is CVE-2023-25989?
CVE-2023-25989 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.38% probability of exploitation in the next 30 days.
How do I fix CVE-2023-25989?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-25989?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST