← WordPress Vulnerabilities
WordPress security by component

Coupon Creator

Coupon Creator is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 20, 2023; the highest published CVSS base score is 4.3.

Plugin slug: coupon-creator

CVE-2020-36751: Coupon Creator: Cross-site request forgery

Coupon Creator is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.

PublishedOct 20, 2023
Safe version guidanceSee mitigation notes
Published vulnerabilities for coupon-creator
Safe version
Oct 20, 2023 CVE-2020-36751
Coupon Creator: Cross-site request forgery
Coupon Creator is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
See mitigation notes
CVE4.3
NVD4.3