CVE-2023-46198 – WordPress Appointment Calendar Plugin <= 2.9.6 is vulnerable to Cross Site Request Forgery (CSRF)

https://notcve.org/view.php?id=CVE-2023-46198

18 Oct 2023 — Cross-Site Request Forgery (CSRF) vulnerability in Scientech It Solution Appointment Calendar plugin <= 2.9.6 versions. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en el complemento Scientech It Solution Appointment Calendar en versiones <= 2.9.6. The Appointment Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.6. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticate... • https://patchstack.com/database/vulnerability/appointment-calendar/wordpress-appointment-calendar-plugin-2-9-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •