CVE-2023-2010 is a low-severity vulnerability affecting the Forminator WordPress plugin, specifically versions prior to 1.24.1. This issue arises from the plugin's lack of an atomic operation to check and update a user's voting status, leading to a race condition that may allow a single user to cast multiple votes on a poll. Systems impacted by this vulnerability are WordPress websites using the affected versions of the Forminator plugin.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you'll need to check if your WordPress website is using the Forminator plugin with a version lower than 1.24.1. If your site is running an affected version, it may be susceptible to this low-severity issue, which allows a single user to cast multiple votes on a poll due to a race condition. To ensure you're not impacted, verify the version of the Forminator plugin installed on your website.

What should I do if I'm affected?

If you're affected by the vulnerability, update your Forminator plugin to version 1.24.1 or later. To do this, log in to your WordPress dashboard, navigate to the plugins section, find Forminator, and click Update if available. This will fix the issue and prevent users from casting multiple votes on a poll.

Is CVE-2023-2010 in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-2010 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This issue, found in the Forminator WordPress plugin before version 1.24.1, allows a single user to vote multiple times on a poll due to a race condition. The vulnerability was published on July 4, 2023. There is no specified due date or required action, but updating the plugin to version 1.24.1 or later should resolve the problem.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-362, which involves a race condition in the Forminator WordPress plugin, which may allow a user to cast multiple votes on a poll.

For more details

CVE-2023-2010 is a low-severity vulnerability in the Forminator WordPress plugin, which may allow users to cast multiple votes on a poll due to a race condition. For a comprehensive analysis of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the link below.

• Forminator < 1.24.1 – Unauthenticated Race Condition on poll vote