HT Event – WordPress Event Manager Plugin for Elementor, CVE-2023-0496

CVE, Research URL: CVE-2023-0496
Home page URL: Security reports for HT Event – WordPress Event Manager Plugin for Elementor
Application: HT Event – WordPress Event Manager Plugin for Elementor
Published on: Mar 27, 2023
Research Description: The HT Event WordPress plugin before 1.4.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Affected versions: Min -, max 1.4.6.
Status: vulnerable

HT Event &#8211; WordPress Event Manager Plugin for Elementor, CVE-2023-0496