Medium · 4.3 CVE-2023-50873 EUVD-2023-55606GHSA-j7g4-jh25-7f26

WordPress Add Any Extension to Pages Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Marios Alexandrou Product: Add Any Extension to Pages

Description

Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4.

Affected products

Vendor	Product	Affected	Fixed
Marios Alexandrou	Add Any Extension to Pages	≤ 1.4	—

References

https://patchstack.com/database/vulnerability/add-any-extension-to-pages/wordpress-add-any-extension-to-pages-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry