CVE-2023-45106 – WordPress Urvanov Syntax Highlighter Plugin <= 2.8.33 is vulnerable to Cross Site Request Forgery (CSRF)

https://notcve.org/view.php?id=CVE-2023-45106

06 Oct 2023 — Cross-Site Request Forgery (CSRF) vulnerability in Fedor Urvanov, Aram Kocharyan Urvanov Syntax Highlighter plugin <= 2.8.33 versions. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en el complemento Fedor Urvanov, Aram Kocharyan Urvanov Syntax Highlighter en versiones <= 2.8.33. The Urvanov Syntax Highlighter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.33. This is due to missing or incorrect nonce validation on the init_ajax function. This ... • https://patchstack.com/database/vulnerability/urvanov-syntax-highlighter/wordpress-urvanov-syntax-highlighter-plugin-2-8-33-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •