← All advisories

Medium severity6.1NVD Advisory· Published Nov 13, 2023· Updated Jun 17, 2026

CVE-2023-32123

CVE-2023-32123

Description

Cross-Site Request Forgery (CSRF) vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3.

Affected products

2

Dream Theme/The7
cpe:2.3:a:dream-theme:the7:*:*:*:*:*:wordpress:*:*
Range: <=11.7.3
WordPress/The7llm-fuzzy
Range: <=11.7.3
Package: https://wordpress.org/themes/the7

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/dt-the7/wordpress-the7-website-and-ecommerce-builder-for-wordpress-theme-11-0-3-cross-site-request-forgery-csrfnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.