« Volver al listado

CVE-2023-49838

Estado: AplazadaMedia (4.3)—

Cross-Site Request Forgery (CSRF) vulnerability in KlbTheme Clotya theme, KlbTheme Cosmetsy theme, KlbTheme Furnob theme, KlbTheme Bacola theme, KlbTheme Partdo theme, KlbTheme Medibazar theme, KlbTheme Machic theme.This issue affects Clotya theme: from n/a through 1.1.6; Cosmetsy theme: from n/a through 1.7.7; Furnob theme: from n/a through 1.2.2; Bacola theme: from n/a through 1.3.3; Partdo theme: from n/a through 1.1.1; Medibazar theme: from n/a through 1.8.6; Machic theme: from n/a through 1.2.8.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Klbtheme — BacolaAIKlbtheme — ClotyaAIKlbtheme — CosmetsyAIKlbtheme — FurnobAIKlbtheme — MachicAIKlbtheme — MedibazarAIKlbtheme — PartdoAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-49838",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-49838",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-06T15:50:16.790791Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "audit@patchstack.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "audit@patchstack.com",
      "affectedData": [
        {
          "vendor": "KlbTheme",
          "product": "Clotya theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.1.6"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "KlbTheme",
          "product": "Cosmetsy theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.7.7"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "KlbTheme",
          "product": "Furnob theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.2.2"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "KlbTheme",
          "product": "Bacola theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.3.3"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "KlbTheme",
          "product": "Partdo theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.1.1"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "KlbTheme",
          "product": "Medibazar theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.8.6"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "KlbTheme",
          "product": "Machic theme",
          "versions": [
            {
              "status": "affected",
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.2.8"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-03-26T09:15:09.710",
  "references": [
    {
      "url": "https://patchstack.com/database/vulnerability/bacola/wordpress-bacola-theme-1-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/clotya/wordpress-clotya-theme-1-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/cosmetsy/wordpress-cosmetsy-theme-1-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/furnob/wordpress-furnob-theme-1-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/machic/wordpress-machic-theme-1-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/medibazar/wordpress-medibazar-theme-1-8-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/partdo/wordpress-partdo-theme-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/bacola/wordpress-bacola-theme-1-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/clotya/wordpress-clotya-theme-1-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/cosmetsy/wordpress-cosmetsy-theme-1-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/furnob/wordpress-furnob-theme-1-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/machic/wordpress-machic-theme-1-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/medibazar/wordpress-medibazar-theme-1-8-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/partdo/wordpress-partdo-theme-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "audit@patchstack.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-Site Request Forgery (CSRF) vulnerability in KlbTheme Clotya theme, KlbTheme Cosmetsy theme, KlbTheme Furnob theme, KlbTheme Bacola theme, KlbTheme Partdo theme, KlbTheme Medibazar theme, KlbTheme Machic theme.This issue affects Clotya theme: from n/a through 1.1.6; Cosmetsy theme: from n/a through 1.7.7; Furnob theme: from n/a through 1.2.2; Bacola theme: from n/a through 1.3.3; Partdo theme: from n/a through 1.1.1; Medibazar theme: from n/a through 1.8.6; Machic theme: from n/a through 1.2.8."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Cross-Site Request Forgery (CSRF) en el tema KlbTheme Clotya, el tema KlbTheme Cosmetsy, el tema KlbTheme Furnob, el tema KlbTheme Bacola, el tema KlbTheme Partdo, el tema KlbTheme Medibazar, el tema KlbTheme Machic. Este problema afecta al tema Clotya: desde n/a hasta 1.1 .6; Tema Cosmetsy: desde n/a hasta 1.7.7; Tema Furnob: desde n/a hasta 1.2.2; Tema Bacola: desde n/a hasta 1.3.3; Tema Partdo: desde n/a hasta 1.1.1; Tema Medibazar: desde n/a hasta 1.8.6; Tema Machic: desde n/a hasta 1.2.8."
    }
  ],
  "lastModified": "2026-06-17T06:36:35.033",
  "sourceIdentifier": "audit@patchstack.com"
}