Medium · 4.3 CVE-2023-51668 EUVD-2023-56368GHSA-cpmc-862m-r48v

WordPress Inline Image Upload for BBPress Plugin <= 1.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

Published Jan 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Zone Product: Inline Image Upload for BBPress

Description

Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Inline Image Upload for BBPress.This issue affects Inline Image Upload for BBPress: from n/a through 1.1.18.

Affected products

Vendor	Product	Affected	Fixed
WP Zone	Inline Image Upload for BBPress	≤ 1.1.18	—

References

https://patchstack.com/database/vulnerability/image-upload-for-bbpress/wordpress-inline-image-upload-for-bbpress-plugin-1-1-18-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry