CVE-2023-7197
HIGHCorbyboy Marketing Twitter Bot < 1.11 - CSRF
Title source: ruleDescription
The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Scores
CVSS v3
7.1
EPSS
0.0012
EPSS Percentile
30.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Classification
CWE
CWE-352
Status
published
Affected Products (1)
corbyboy/marketing_twitter_bot
< 1.11
Timeline
Published
May 15, 2025
Tracked Since
Feb 18, 2026