WordPress Sentinel Plugin <= 1.0.0 - CSRF

2012-10-2500:00:00

Julio

patchstack.com

0.003 Low

EPSS

Percentile

71.2%

JSON

Because of this vulnerability in wordpress_sentinel.php, the attackers can hijack the authentication of an administrator for requests that trigger snapshots.

Solution

           Update the plugin.

CPENameOperatorVersion
sentinelle1.0.0

CPE	Name	Operator	Version
	sentinel	le	1.0.0

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5226

0.003 Low

EPSS

Percentile

71.2%

JSON

Related for PATCHSTACK:6381C85A2C383675132F74BB069FC8CB