High · 7.1 CVE-2023-35877 EUVD-2023-39870GHSA-xpj7-v9x5-6gh9

WordPress Extra User Details Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Vadym K. Product: Extra User Details

Description

Cross-Site Request Forgery (CSRF) vulnerability in Vadym K. Extra User Details allows Stored XSS.This issue affects Extra User Details: from n/a through 0.5.

Affected products

Vendor	Product	Affected	Fixed
Vadym K.	Extra User Details	≤ 0.5	—

References

https://patchstack.com/database/vulnerability/extra-user-details/wordpress-extra-user-details-plugin-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry