CVE-2023-5756

The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/browser/digital-publications-by-supsystic/trunk/classes/frame.php#L144Product
• https://plugins.trac.wordpress.org/changeset/3010075
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2304e4dc-0dc6-4ded-b8e6-8d76d70f63d7?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/digital-publications-by-supsystic/trunk/classes/frame.php#L144Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2304e4dc-0dc6-4ded-b8e6-8d76d70f63d7?source=cveThird Party Advisory

Published

Dec 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5750The EmbedPress WordPress plugin before 3.9.2 does not saniti…6.1
• CVE-2023-5751A local attacker with low privileges can read and modify any…7.8
• CVE-2023-5752When installing a package from a Mercurial VCS URL (ie "pip…3.3
• CVE-2023-5753Potential buffer overflows in the Bluetooth subsystem due to…8.8
• CVE-2023-5754 Sielco PolyEco1000 uses a weak set of default administr…9.8
• CVE-2023-5755Rejected reason: **REJECT** Duplicate of CVE-2023-46784. Ple…
• CVE-2023-5757The WP Crowdfunding WordPress plugin before 2.1.8 does not s…4.8
• CVE-2023-5758When opening a page in reader mode, the redirect URL could h…6.1
• CVE-2023-5759In Helix Core versions prior to 2023.2, an unauthenticated r…7.5
• CVE-2023-5760A time-of-check to time-of-use (TOCTOU) bug in handling of I…7
• CVE-2023-5761The Burst Statistics – Privacy-Friendly Analytics for WordPr…7.5
• CVE-2023-5762The Filr WordPress plugin before 1.2.3.6 is vulnerable from …8.8