Description
Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Meks | Meks Video Importer | ≤ 1.0.10 | — |
| Meks | Meks Time Ago | ≤ 1.1.6 | — |
| Meks | Meks ThemeForest Smart Widget | ≤ 1.4 | — |
| Meks | Meks Smart Author Widget | ≤ 1.1.3 | — |
| Meks | Meks Audio Player | ≤ 1.2 | — |
| Meks | Meks Easy Maps | ≤ 2.1.3 | — |
| Meks | Meks Easy Photo Feed Widget | ≤ 1.2.7 | — |
| Meks | Meks Simple Flickr Widget | ≤ 1.2 | — |
| Meks | Meks Easy Ads Widget | ≤ 2.0.7 | — |
| Meks | Meks Smart Social Widget | ≤ 1.6 | — |
References
- https://patchstack.com/database/vulnerability/meks-video-importer/wordpress-meks-video-importer-plugin-1-0-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-time-ago/wordpress-meks-time-ago-plugin-1-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-themeforest-smart-widget/wordpress-meks-themeforest-smart-widget-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-smart-author-widget/wordpress-meks-smart-author-widget-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-audio-player/wordpress-meks-audio-player-plugin-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-easy-maps/wordpress-meks-easy-maps-plugin-2-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-easy-instagram-widget/wordpress-meks-easy-photo-feed-widget-plugin-1-2-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-simple-flickr-widget/wordpress-meks-simple-flickr-widget-plugin-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-easy-ads-widget/wordpress-meks-easy-ads-widget-plugin-2-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/meks-smart-social-widget/wordpress-meks-smart-social-widget-plugin-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry