CVE-2023-2326 — MEDIUM (6.5)

Q: How severe is CVE-2023-2326?

CVE-2023-2326 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-2326?

Check the references section above for vendor advisories and patch information. Affected products include: Gsheetconnector Gravity Forms Google Sheets Connector.

Vulnerability Description

The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugin through 1.3.5 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Gsheetconnector	Gravity Forms Google Sheets Connector	< 1.3.5

References

https://wpscan.com/vulnerability/f922695a-b803-4edf-aadc-80c79d99bebbExploitThird Party Advisory
https://wpscan.com/vulnerability/f922695a-b803-4edf-aadc-80c79d99bebbExploitThird Party Advisory

FAQ

What is CVE-2023-2326?

CVE-2023-2326 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugin through 1.3.5 does not have CSRF check when updating its Access Code, which co...

How severe is CVE-2023-2326?

CVE-2023-2326 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-2326?

Check the references section above for vendor advisories and patch information. Affected products include: Gsheetconnector Gravity Forms Google Sheets Connector.