Description
Cross-Site Request Forgery (CSRF) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Didier Sampaolo | SpamReferrerBlock | ≤ 2.22 | — |
Medium · 4.3
CVE-2023-34371
EUVD-2023-38451GHSA-58c4-wphj-qffh
WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 9, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack