Description
Cross-Site Request Forgery (CSRF) vulnerability in FuturioWP Futurio Extra plugin <= 1.8.4 versions leads to activation of arbitrary plugin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FuturioWP | Futurio Extra | ≤ 1.8.4 | — |
Medium · 6.5
CVE-2023-40201
EUVD-2023-44798GHSA-7rq5-xwr8-9379
WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack