Vulnerabilities > CVE-2023-3977

Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for unauthenticated attackers to install plugins from the limited list via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Vulnerable Configurations

Part	Description	Count
Application	Inisev Inisev Redirection - Inisev Redirection 1.0.0 Inisev Redirection 1.0.1 Inisev Redirection 1.0.2 Inisev Redirection 1.0.3 Inisev Redirection 1.0.4 Inisev Redirection 1.0.5 Inisev Redirection 1.0.6 Inisev Redirection 1.0.7 Inisev Redirection 1.0.8 Inisev Redirection 1.0.9 Inisev Redirection 1.1.0 Inisev Redirection 1.1.1 Inisev Redirection 1.1.2 Inisev Redirection 1.1.3 Inisev SSL Mixed Content FIX 1.0 Inisev SSL Mixed Content FIX 1.1 Inisev SSL Mixed Content FIX 1.1.1 Inisev SSL Mixed Content FIX 1.2 Inisev SSL Mixed Content FIX 1.3 Inisev SSL Mixed Content FIX 1.3.1 Inisev SSL Mixed Content FIX 1.4 Inisev SSL Mixed Content FIX 1.5 Inisev SSL Mixed Content FIX 1.5.1 Inisev SSL Mixed Content FIX 1.5.2 Inisev SSL Mixed Content FIX 1.5.3 Inisev SSL Mixed Content FIX 2.0 Inisev SSL Mixed Content FIX 2.1 Inisev SSL Mixed Content FIX 2.2 Inisev SSL Mixed Content FIX 2.3 Inisev SSL Mixed Content FIX 2.4 Inisev SSL Mixed Content FIX 3.0 Inisev SSL Mixed Content FIX 3.1 Inisev SSL Mixed Content FIX 3.2 Inisev SSL Mixed Content FIX 3.2.1 Inisev SSL Mixed Content FIX 3.2.2 Inisev SSL Mixed Content FIX 3.2.3 Inisev RSS Redirect & Feedburner Alternative 1.1 Inisev RSS Redirect & Feedburner Alternative 1.2 Inisev RSS Redirect & Feedburner Alternative 1.3 Inisev RSS Redirect & Feedburner Alternative 1.9 Inisev RSS Redirect & Feedburner Alternative 2.3 Inisev RSS Redirect & Feedburner Alternative 2.5 Inisev RSS Redirect & Feedburner Alternative 2.7 Inisev RSS Redirect & Feedburner Alternative 2.9 Inisev RSS Redirect & Feedburner Alternative 3.0 Inisev RSS Redirect & Feedburner Alternative 3.1 Inisev RSS Redirect & Feedburner Alternative 3.2 Inisev RSS Redirect & Feedburner Alternative 3.3 Inisev RSS Redirect & Feedburner Alternative 3.4	50
Application	Themecheck Themecheck Ultimate Posts Widget - Themecheck Ultimate Posts Widget 2.0.0 Themecheck Ultimate Posts Widget 2.0.1 Themecheck Ultimate Posts Widget 2.0.2 Themecheck Ultimate Posts Widget 2.0.3 Themecheck Ultimate Posts Widget 2.0.4 Themecheck Ultimate Posts Widget 2.0.5 Themecheck Ultimate Posts Widget 2.0.6 Themecheck Ultimate Posts Widget 2.0.7 Themecheck Ultimate Posts Widget 2.0.8 Themecheck Ultimate Posts Widget 2.0.9 Themecheck Ultimate Posts Widget 2.1.0 Themecheck Ultimate Posts Widget 2.1.1 Themecheck Ultimate Posts Widget 2.1.3 Themecheck Ultimate Posts Widget 2.1.4 Themecheck Ultimate Posts Widget 2.1.5 Themecheck Ultimate Posts Widget 2.1.6 Themecheck Ultimate Posts Widget 2.2.0 Themecheck Ultimate Posts Widget 2.2.1 Themecheck Ultimate Posts Widget 2.2.2 Themecheck Ultimate Posts Widget 2.2.3 Themecheck Ultimate Posts Widget 2.2.4 Themecheck Enhanced Text Widget - Themecheck Enhanced Text Widget 1.2 Themecheck Enhanced Text Widget 1.2.2 Themecheck Enhanced Text Widget 1.3 Themecheck Enhanced Text Widget 1.3.1 Themecheck Enhanced Text Widget 1.3.2 Themecheck Enhanced Text Widget 1.3.3 Themecheck Enhanced Text Widget 1.3.4 Themecheck Enhanced Text Widget 1.4 Themecheck Enhanced Text Widget 1.4.1 Themecheck Enhanced Text Widget 1.4.2 Themecheck Enhanced Text Widget 1.4.3 Themecheck Enhanced Text Widget 1.4.4 Themecheck Enhanced Text Widget 1.4.5 Themecheck Enhanced Text Widget 1.4.6 Themecheck Enhanced Text Widget 1.4.7 Themecheck Enhanced Text Widget 1.4.9 Themecheck Enhanced Text Widget 1.5 Themecheck Enhanced Text Widget 1.5.1 Themecheck Enhanced Text Widget 1.5.2 Themecheck Enhanced Text Widget 1.5.3 Themecheck Enhanced Text Widget 1.5.4 Themecheck Enhanced Text Widget 1.5.5 Themecheck Enhanced Text Widget 1.5.6 Themecheck Enhanced Text Widget 1.5.7	47
Application	Ultimatelysocial Ultimatelysocial Social Media Share Buttons & Social Sharing Icons - Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.6.9 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.0 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.1 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.2 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.3 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.4 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.5 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.7 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.8 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.7.9 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.8.0 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.8.2 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.8.3 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.8.4 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.8.5 Ultimatelysocial Social Media Share Buttons & Social Sharing Icons 2.8.6	17
Application	Mypopups Mypopups POP UP - Mypopups POP UP 1.0.0 Mypopups POP UP 1.0.1 Mypopups POP UP 1.0.2 Mypopups POP UP 1.0.3 Mypopups POP UP 1.0.4 Mypopups POP UP 1.0.5 Mypopups POP UP 1.0.6 Mypopups POP UP 1.0.7 Mypopups POP UP 1.0.8 Mypopups POP UP 1.0.9 Mypopups POP UP 1.1.0 Mypopups POP UP 1.1.1 Mypopups POP UP 1.1.2 Mypopups POP UP 1.1.3 Mypopups POP UP 1.1.4 Mypopups POP UP 1.1.5 Mypopups POP UP 1.1.6 Mypopups POP UP 1.1.7 Mypopups POP UP 1.1.8 Mypopups POP UP 1.1.9	21
Application	Copy-Delete-Posts Copy Delete Posts Duplicate Post - Copy Delete Posts Duplicate Post 1.0.0 Copy Delete Posts Duplicate Post 1.0.1 Copy Delete Posts Duplicate Post 1.0.2 Copy Delete Posts Duplicate Post 1.0.3 Copy Delete Posts Duplicate Post 1.0.4 Copy Delete Posts Duplicate Post 1.0.5 Copy Delete Posts Duplicate Post 1.0.6 Copy Delete Posts Duplicate Post 1.0.7 Copy Delete Posts Duplicate Post 1.0.8 Copy Delete Posts Duplicate Post 1.0.9 Copy Delete Posts Duplicate Post 1.1.0 Copy Delete Posts Duplicate Post 1.1.1 Copy Delete Posts Duplicate Post 1.1.2 Copy Delete Posts Duplicate Post 1.1.3 Copy Delete Posts Duplicate Post 1.1.4 Copy Delete Posts Duplicate Post 1.1.5 Copy Delete Posts Duplicate Post 1.1.6 Copy Delete Posts Duplicate Post 1.1.7 Copy Delete Posts Duplicate Post 1.1.8 Copy Delete Posts Duplicate Post 1.1.9 Copy Delete Posts Duplicate Post 1.2.0 Copy Delete Posts Duplicate Post 1.2.1 Copy Delete Posts Duplicate Post 1.2.2 Copy Delete Posts Duplicate Post 1.2.3 Copy Delete Posts Duplicate Post 1.2.4 Copy Delete Posts Duplicate Post 1.2.5 Copy Delete Posts Duplicate Post 1.2.6 Copy Delete Posts Duplicate Post 1.2.7 Copy Delete Posts Duplicate Post 1.2.8 Copy Delete Posts Duplicate Post 1.2.9 Copy Delete Posts Duplicate Post 1.3.0 Copy Delete Posts Duplicate Post 1.3.1 Copy Delete Posts Duplicate Post 1.3.2 Copy Delete Posts Duplicate Post 1.3.3 Copy Delete Posts Duplicate Post 1.3.4 Copy Delete Posts Duplicate Post 1.3.5 Copy Delete Posts Duplicate Post 1.3.6 Copy Delete Posts Duplicate Post 1.3.7 Copy Delete Posts Duplicate Post 1.3.8 Copy Delete Posts Duplicate Post 1.3.9	41
Application	Backupbliss Backupbliss Clone - Backupbliss Clone 2.0.9 Backupbliss Clone 2.1 Backupbliss Clone 2.1.1 Backupbliss Clone 2.1.2 Backupbliss Clone 2.1.3 Backupbliss Clone 2.1.4 Backupbliss Clone 2.1.5 Backupbliss Clone 2.1.6 Backupbliss Clone 2.1.7 Backupbliss Clone 2.1.8 Backupbliss Clone 2.1.9 Backupbliss Clone 2.2 Backupbliss Clone 2.2.1 Backupbliss Clone 2.2.2 Backupbliss Clone 2.2.3 Backupbliss Clone 2.2.4 Backupbliss Clone 2.2.5 Backupbliss Clone 2.2.6 Backupbliss Clone 2.2.7 Backupbliss Clone 2.2.8 Backupbliss Clone 2.2.9 Backupbliss Clone 2.2.10 Backupbliss Clone 2.3.0 Backupbliss Clone 2.3.1 Backupbliss Clone 2.3.2 Backupbliss Clone 2.3.3 Backupbliss Clone 2.3.4 Backupbliss Clone 2.3.5 Backupbliss Clone 2.3.6 Backupbliss Clone 2.3.7 Backupbliss Backup Migration - Backupbliss Backup Migration 1.0.0 Backupbliss Backup Migration 1.0.1 Backupbliss Backup Migration 1.0.2 Backupbliss Backup Migration 1.0.3 Backupbliss Backup Migration 1.0.4 Backupbliss Backup Migration 1.0.5 Backupbliss Backup Migration 1.0.6 Backupbliss Backup Migration 1.0.7 Backupbliss Backup Migration 1.0.8 Backupbliss Backup Migration 1.0.9 Backupbliss Backup Migration 1.1.0 Backupbliss Backup Migration 1.1.1 Backupbliss Backup Migration 1.1.2 Backupbliss Backup Migration 1.1.3 Backupbliss Backup Migration 1.1.4 Backupbliss Backup Migration 1.1.5 Backupbliss Backup Migration 1.1.6 Backupbliss Backup Migration 1.1.7 Backupbliss Backup Migration 1.1.8 Backupbliss Backup Migration 1.1.9 Backupbliss Backup Migration 1.2.0 Backupbliss Backup Migration 1.2.1 Backupbliss Backup Migration 1.2.2 Backupbliss Backup Migration 1.2.3 Backupbliss Backup Migration 1.2.4 Backupbliss Backup Migration 1.2.5 Backupbliss Backup Migration 1.2.6 Backupbliss Backup Migration 1.2.7	60

Vulnerabilities > CVE-2023-3977 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2023-3977"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2023-3977