Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86371
HistoryNov 30, 2022 - 12:00 a.m.

WordPress WP Affiliate Platform plugin cross-site request forgery vulnerability

2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
affiliate platform
cross-site request forgery
vulnerability
php
blogging platforms
random numbers
attacks
security

EPSS

0.001

Percentile

23.6%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Affiliate Platform plugin 6.3.9 and earlier versions contain a cross-site request forgery vulnerability that results from the failure to validate random numbers for various functions, which can be exploited to launch cross-site request forgery attacks.

EPSS

0.001

Percentile

23.6%

Related for CNVD-2022-86371