gmace vulnerabilities and fixes
Recent CVEs affecting gmace, with upgrade or downgrade steps. 2 tracked.
gmace has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-03-29. Highest priority: CVE-2023-1509 (score 43/100).
- CVE-2023-23861 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in German Mesky GMAce plugin <= 1.5.2 versions.
- CVE-2023-1509 HIGH 8.8 UPGRADE The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1
FAQ
How do I fix gmace vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gmace being exploited right now?
None of the tracked gmace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gmace CVE should I patch first?
CVE-2023-1509 currently ranks highest (43/100): The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.