Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-49838 EUVD-2023-53746GHSA-mmch-m456-f59q

Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme

Published Mar 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in KlbTheme Clotya theme, KlbTheme Cosmetsy theme, KlbTheme Furnob theme, KlbTheme Bacola theme, KlbTheme Partdo theme, KlbTheme Medibazar theme, KlbTheme Machic theme.This issue affects Clotya theme: from n/a through 1.1.6; Cosmetsy theme: from n/a through 1.7.7; Furnob theme: from n/a through 1.2.2; Bacola theme: from n/a through 1.3.3; Partdo theme: from n/a through 1.1.1; Medibazar theme: from n/a through 1.8.6; Machic theme: from n/a through 1.2.8.

Affected products

VendorProductAffectedFixed
KlbTheme Clotya theme ≤ 1.1.6 —
KlbTheme Cosmetsy theme ≤ 1.7.7 —
KlbTheme Furnob theme ≤ 1.2.2 —
KlbTheme Bacola theme ≤ 1.3.3 —
KlbTheme Partdo theme ≤ 1.1.1 —
KlbTheme Medibazar theme ≤ 1.8.6 —
KlbTheme Machic theme ≤ 1.2.8 —

References