CVE-2023-3055

The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce validation on the 'azh_save' function. This makes it possible for unauthenticated attackers to update the post content and inject malicious JavaScript via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/browser/page-builder-by-azexo/trunk/azexo_html.php#L2721Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2efeffa2-b21a-4aa1-93b0-51c775758ab1?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/page-builder-by-azexo/trunk/azexo_html.php#L2721Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2efeffa2-b21a-4aa1-93b0-51c775758ab1?source=cveThird Party Advisory

Published

Jun 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30544Kiwi TCMS is an open source test management system. In versi…4.3
• CVE-2023-30545PrestaShop is an Open Source e-commerce web application. Pri…6.5
• CVE-2023-30546Contiki-NG is an operating system for Internet of Things dev…7.5
• CVE-2023-30547vm2 is a sandbox that can run untrusted code with whiteliste…10
• CVE-2023-30548gatsby-plugin-sharp is a plugin for the gatsby framework whi…4.3
• CVE-2023-30549Apptainer is an open source container platform for Linux. Th…7.8
• CVE-2023-30550MeterSphere is an open source continuous testing platform, c…4.5
• CVE-2023-30551Rekor is an open source software supply chain transparency l…7.5
• CVE-2023-30552Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30553Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30554Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30555Archery is an open source SQL audit platform. The Archery pr…6.5