PatchTheCVEwebdevstudios vulnerabilities
Recent CVEs affecting webdevstudios products. 3 tracked.
webdevstudios has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-07-10. Highest priority: CVE-2023-1623 (score 35/100).
- CVE-2023-1623 MEDIUM 6.5 UPGRADE The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug
- CVE-2015-10120 LOW 3.5 UPGRADE A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0
- CVE-2015-10013 LOW 3.5 UPGRADE A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress
FAQ
How do I fix webdevstudios vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webdevstudios being exploited right now?
None of the tracked webdevstudios CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webdevstudios CVE should I patch first?
CVE-2023-1623 currently ranks highest (35/100): The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug.