Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56245
HistoryJul 13, 2022 - 12:00 a.m.

WordPress Sharebar plugin cross-site request forgery vulnerability

2022-07-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
wordpress
sharebar
plugin
cross-site request forgery
vulnerability
php
csrf checks
settings
administrator
attack
update.

EPSS

0.001

Percentile

21.2%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Sharebar plugin prior to 1.4.1 are vulnerable to cross-site request forgery, which stems from a failure to perform CSRF checks when updating its settings, and can be exploited by attackers to CSRF attack to make the administrator change the update settings.

EPSS

0.001

Percentile

21.2%