Description
Cross-Site Request Forgery (CSRF) vulnerability in David Stöckl Custom Header Images plugin <= 1.2.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| David Stöckl | Custom Header Images | ≤ 1.2.1 | — |
Medium · 5.4
CVE-2023-46636
EUVD-2023-50838GHSA-wjmc-mrpc-8vmf
WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack