Description
Cross-Site Request Forgery (CSRF) vulnerability in Webcodin WCP OpenWeather plugin <= 2.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Webcodin | WCP OpenWeather | ≤ 2.5.0 | — |
Medium · 4.3
CVE-2023-46638
EUVD-2023-50840GHSA-ph4g-vfg9-83hr
WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack