Vulnerabilities > Poeditor

DATE CVE VULNERABILITY TITLE RISK
2023-10-03 CVE-2023-32091 Cross-Site Request Forgery (CSRF) vulnerability in Poeditor
Cross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions.
network
low complexity
poeditor CWE-352
8.8
2023-08-30 CVE-2023-4209 Unspecified vulnerability in Poeditor
The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks.
network
low complexity
poeditor
4.3