CVE-2023-2010

CVSS Score of 10 (low)

Details

Published Jul 4, 2023
Updated: Nov 7, 2023
CWE ID 362

Summary

CVE-2023-2010 is a vulnerability affecting the Forminator WordPress plugin before version 1.24.1. The vulnerability arises due to the lack of an atomic operation in checking whether a user has already voted and updating that information, resulting in a race condition. This race condition may allow a single user to vote multiple times on a poll. The vulnerability has a CVSS score of 15, indicating a high risk level. To remediate this vulnerability, users should update their Forminator plugin to version 1.24.1 or later. If left unaddressed, this vulnerability could potentially lead to the manipulation of poll results and compromise the integrity of an organization's data or decision-making processes.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-2010 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options