← All advisories

Unrated severityNVD Advisory· Published Feb 23, 2023· Updated Apr 28, 2026

WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

CVE-2023-23659

Description

Cross-Site Request Forgery (CSRF) vulnerability in MainWP Matomo Extension <= 4.0.4 versions.

Affected products

2

WordPress/MainWP Matomo Extensionllm-create
Range: <=4.0.4
Mainwp/MainWP Staging Extensioncpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/mainwp-piwik-extension/wordpress-mainwp-matomo-extension-plugin-4-0-4-csrf-leading-to-plugin-settings-change-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.