CVE-2023-32514 MEDIUM

CVE-2023-32514: WordPress Google Site Verification plugin using Meta Tag Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Vendor Himanshu Parashar
Product Google Site Verification plugin using Meta Tag
Weakness CWE-352 · CSRF
Published November 18, 2023
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) vulnerability in Himanshu Parashar Google Site Verification plugin using Meta Tag.This issue affects Google Site Verification plugin using Meta Tag: from n/a through 1.2.

Explanation of Vulnerability in Simple Terms

02Summary

The Google Site Verification plugin using Meta Tag for WordPress contains a cross-site request forgery (CSRF) vulnerability in versions up to 1.2. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. This could allow modification of site settings or other administrative functions.

What an attacker can do

03Attacker Capabilities

Trick a site admin into visiting a malicious page to perform unwanted actions on the site.

Potential impact on your site

04Site Impact

An attacker can modify plugin settings or site configuration if an admin visits a malicious link.

Conditions required to exploit

05Prerequisites

Site admin must be logged in and visit an attacker-controlled webpage.

Key dates

06Disclosure timeline

November 18, 2023 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2026-8944 Plugin for Google Analytics by IO technologies <= 1.1 - Cross-Site Request Forgery via 'ga_id' Parameter CVE-2026-57786 WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability CVE-2026-61981 WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-57761 WordPress SEOWP theme <= 3.12.2 - CSRF to Stored XSS vulnerability CVE-2026-11981 GiveWP <= 4.15.3 - Cross-Site Request Forgery