Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-44998 EUVD-2023-49320GHSA-p583-5mfr-xmp2

WordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Published Oct 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Product: Category Meta plugin

Description

Cross-Site Request Forgery (CSRF) vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin <= 1.2.8 versions.

Affected products

VendorProductAffectedFixed
josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin ≤ 1.2.8 —

References