VDB
CVE-2023-2330
CVE-2023-2330
PUBLISHED
CVSS 8.800000190734863 HIGH
The Caldera Forms Google Sheets Connector WordPress plugin through 1.2 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack
EPSS 0.39% · 32.9th percentile
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.39%
32.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| gsheetconnector | caldera_forms_google_sheets_connector | 0, 0 |
| Unknown | Caldera Forms Google Sheets Connector | 0, 0 |
Timeline
- Jul 17, 2023 CVE Published
- Jul 18, 2023 EPSS Score
- Aug 22, 2023 EPSS Score
- Sep 25, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Jan 7, 2024 EPSS Score
- Feb 11, 2024 EPSS Score
- Mar 17, 2024 EPSS Score
- Apr 20, 2024 EPSS Score
- May 25, 2024 EPSS Score
- Jun 29, 2024 EPSS Score
- Aug 2, 2024 EPSS Score