Description
Cross-Site Request Forgery (CSRF) vulnerability in Faraz Quazi Floating Action Button plugin <= 1.2.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Faraz Quazi | Floating Action Button | ≤ 1.2.1 | — |
Medium · 5.4
CVE-2023-31088
EUVD-2023-35417GHSA-j6wq-57g5-j35c
WordPress Floating Action Button Plugin <=1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 9, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack