CVE-2023-36691: Webwinkelkeur Project Webwinkelkeur

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Albert Peschar WebwinkelKeur plugin <= 3.24 versions.

Affected products

• Webwinkelkeur Project Webwinkelkeur: before 3.25 (fixed in 3.25)

Published 2023-07-10. Last modified 2026-06-17.