CVE-2023-25989: Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart MEDIUM 4.3 UPGRADE UPGRADE UPGRADE
CVE-2023-25989 is a medium-severity flaw (CVSS 4.3) affecting meks audio player, meks easy ads widget, meks easy maps. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.
Why this priority No elevated risk signals yet A fixed release or distro patch exists.
Risk facts CVSS score 4.3 (Medium) Attack vector Network (remote) Attack complexity Low Privileges needed None User interaction Required EPSS exploit chance 0.4% (top 61%) CISA exploited list No Weakness CWE-352 Published 2023-10-03 Last modified 2026-06-17
Share: LinkedIn · X · Reddit
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Timeline 2023-10-03 12:15 UTC Published CVE record published2026-06-17 05:42 UTC Updated Record last modifiedmekshq meks audio player UPGRADE
Affected: <= 1.2
Fixed in: newer than 1.2
Safe to downgrade to: no unaffected older release
1. Check installed version
Copy apt-cache policy meks-audio-player || rpm -q meks-audio-player || meks-audio-player --version
2. UPGRADE to newer than 1.2 (Debian / Ubuntu)
Copy sudo apt update && sudo apt install --only-upgrade meks-audio-player
2. UPGRADE (RHEL / Amazon Linux / Fedora)
Copy sudo dnf upgrade meks-audio-player
Note
Copy Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
mekshq meks easy ads widget UPGRADE
Affected: <= 2.0.7
Fixed in: newer than 2.0.7
Safe to downgrade to: no unaffected older release
1. Check installed version
Copy apt-cache policy meks-easy-ads-widget || rpm -q meks-easy-ads-widget || meks-easy-ads-widget --version
2. UPGRADE to newer than 2.0.7 (Debian / Ubuntu)
Copy sudo apt update && sudo apt install --only-upgrade meks-easy-ads-widget
2. UPGRADE (RHEL / Amazon Linux / Fedora)
Copy sudo dnf upgrade meks-easy-ads-widget
Note
Copy Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
mekshq meks easy maps UPGRADE
Affected: <= 2.1.3
Fixed in: newer than 2.1.3
Safe to downgrade to: no unaffected older release
1. Check installed version
Copy apt-cache policy meks-easy-maps || rpm -q meks-easy-maps || meks-easy-maps --version
2. UPGRADE to newer than 2.1.3 (Debian / Ubuntu)
Copy sudo apt update && sudo apt install --only-upgrade meks-easy-maps
2. UPGRADE (RHEL / Amazon Linux / Fedora)
Copy sudo dnf upgrade meks-easy-maps
Note
Copy Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
mekshq meks easy photo feed widget UPGRADE
Affected: <= 1.2.7
Fixed in: newer than 1.2.7
Safe to downgrade to: no unaffected older release
1. Check installed version
Copy apt-cache policy meks-easy-photo-feed-widget || rpm -q meks-easy-photo-feed-widget || meks-easy-photo-feed-widget --version
2. UPGRADE to newer than 1.2.7 (Debian / Ubuntu)
Copy sudo apt update && sudo apt install --only-upgrade meks-easy-photo-feed-widget
2. UPGRADE (RHEL / Amazon Linux / Fedora)
Copy sudo dnf upgrade meks-easy-photo-feed-widget
Note
Copy Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
mekshq meks simple flickr widget UPGRADE
Affected: <= 1.2
Fixed in: newer than 1.2
Safe to downgrade to: no unaffected older release
1. Check installed version
Copy apt-cache policy meks-simple-flickr-widget || rpm -q meks-simple-flickr-widget || meks-simple-flickr-widget --version
2. UPGRADE to newer than 1.2 (Debian / Ubuntu)
Copy sudo apt update && sudo apt install --only-upgrade meks-simple-flickr-widget
2. UPGRADE (RHEL / Amazon Linux / Fedora)
Copy sudo dnf upgrade meks-simple-flickr-widget
Note
Copy Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
mekshq meks smart author widget UPGRADE
Affected: <= 1.1.3
Fixed in: newer than 1.1.3
Safe to downgrade to: no unaffected older release
1. Check installed version
Copy apt-cache policy meks-smart-author-widget || rpm -q meks-smart-author-widget || meks-smart-author-widget --version
2. UPGRADE to newer than 1.1.3 (Debian / Ubuntu)
Copy sudo apt update && sudo apt install --only-upgrade meks-smart-author-widget
2. UPGRADE (RHEL / Amazon Linux / Fedora)
Copy sudo dnf upgrade meks-smart-author-widget
Note
Copy Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD ·
CVE Program ·
Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems. Quick answers How do I fix CVE-2023-25989? meks audio player: upgrade to newer than 1.2; meks easy ads widget: upgrade to newer than 2.0.7; meks easy maps: upgrade to newer than 2.1.3. Exact commands for each OS are on this page.
Is CVE-2023-25989 being exploited? CVE-2023-25989 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-25989 affect? CVE-2023-25989 affects meks audio player, meks easy ads widget, meks easy maps. Severity is medium (CVSS 4.3). Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks
How urgent is CVE-2023-25989? Priority 25/100. No elevated risk signals yet.
References ← Back to latest CVEs
PatchTheCVE