← All advisories

Medium severity4.3NVD Advisory· Published Oct 12, 2023· Updated Jun 17, 2026

CVE-2023-41131

CVE-2023-41131

Description

Cross-Site Request Forgery (CSRF) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.10 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Followingmedarling/Spotify Play Button
cpe:2.3:a:followingmedarling:spotify_play_button:*:*:*:*:*:wordpress:*:*
Range: <=2.10
WordPress/Spotify Play Button For Wordpressllm-fuzzy
Range: <=2.10
Package: https://wordpress.org/plugins/spotify-play-button-for-wordpress
Jonk @ Follow me Darling/Sp*tify Play Button for WordPressv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-10-cross-site-request-forgery-csrf-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.