Medium severity5.4NVD Advisory· Published Nov 13, 2023· Updated Jun 17, 2026

CVE-2023-26531

Description

Cross-Site Request Forgery (CSRF) vulnerability in 闪电博多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 allows Cross Site Request Forgery.This issue affects 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条: from n/a through 4.2.7.

Affected products

WordPress/多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条llm-create
Range: <=4.2.7
闪电博/多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条v5
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/baidu-submit-link/wordpress-baidu-google-bing-indexnow-yandex-plugin-4-2-1-cross-site-request-forgery-csrf-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000