Description
Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin <= 2.0.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jeff Sherk | Update Theme and Plugins from Zip File | ≤ 2.0.0 | — |
Medium · 4.3
CVE-2023-25489
EUVD-2023-29444GHSA-2p2q-m5g6-rghx
WordPress Update Theme and Plugins from Zip File Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack