Medium · 4.3 CVE-2023-45106 EUVD-2023-49427GHSA-652g-v3x6-f997

WordPress Urvanov Syntax Highlighter Plugin <= 2.8.33 is vulnerable to Cross Site Request Forgery (CSRF)

Published Oct 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Fedor Urvanov, Aram Kocharyan Urvanov Syntax Highlighter plugin <= 2.8.33 versions.

Vendor	Product	Affected	Fixed
Fedor Urvanov, Aram Kocharyan	Urvanov Syntax Highlighter	≤ 2.8.33	—