Analyst readout for executives and security teams
Plain-English summary
This is a CSRF issue in the WordPress MyBookTable Bookstore plugin by Stormhill Media. A successful attack would require tricking a user into an unwanted action, with limited integrity impact. Sources do not show data theft, outage impact, or confirmed active exploitation.
Executive priority
Treat as a moderate website risk. It is not currently evidenced as exploited, but exposed WordPress plugins are common targets. Prioritize sites where the plugin is active on revenue, author, or customer-facing properties, especially where administrators use persistent sessions.
Technical view
CVE-2023-48331 is CWE-352 affecting MyBookTable Bookstore through 3.3.4 per CVE data. CVSS 3.1 is 4.3: network reachable, low complexity, no privileges, user interaction required, low integrity impact. The sources do not identify the endpoint, required role, patch version, or affected action.
Likely exposure
Exposure appears limited to WordPress sites running Stormhill Media MyBookTable Bookstore versions in the affected range. Confirm installed plugin slug packageName mybooktable and exact version. The source bundle has no CPEs and no default affected deployment profile.
Exploitation context
The CVE is not listed as KEV in the supplied bundle. No cited source in the bundle confirms active exploitation. Practical exploitation would depend on a victim interaction and a relevant authenticated WordPress session, but the sources do not provide operational details.
Researcher notes
The source evidence is incomplete. CVE text says affected through 3.3.4, while the Patchstack URL title references 3.3.3. The bundle does not name a fixed version, vulnerable endpoint, nonce failure details, or required victim role. Validate against vendor and Patchstack records before asserting closure.
Mitigation direction
- Inventory WordPress sites for the mybooktable plugin and installed version.
- Check Stormhill Media, WordPress plugin, and Patchstack guidance for a fixed release.
- Update the plugin if a vendor-supported fixed version is available.
- Temporarily disable or remove the plugin where it is unused or nonessential.
- Limit privileged WordPress sessions and review admin activity for unexpected changes.
Validation and detection
- Confirm whether MyBookTable Bookstore is installed on each WordPress site.
- Record the exact plugin version and compare it with the CVE affected range.
- Check security tooling or Patchstack data for local detection of CVE-2023-48331.
- Review WordPress logs for unexpected plugin-related configuration or content changes.
- Document whether remediation used update, removal, disablement, or accepted risk.
Public sources used
Based on public source material and reviewed before publication.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-352: User-session and phishing behavior lookup
Client-side and session-facing weaknesses should be reviewed alongside initial-access and user-execution behaviors. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-48331 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 4.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N2.81.4Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
4.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source materials
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.