Lucene search
WpvulndbWPVDB-ID:0125391D-1F4A-4B7B-B672-5D0001F2A605HistoryFeb 17, 2023 - 12:00 a.m.
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
2023-02-1700:00:00
wpscan.com
3
podlove
podcast
publisher
csrf
vulnerability
software
0.001 Low
EPSS
Percentile
27.6%
The plugin does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. The original researcher didn’t provide enough information on which actions could be performed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| podlove-podcasting-plugin-for-wordpress | lt | 3.8.4 |
Related
nvd
nvd
CVE-2023-25472
2023-05-23 13:15:09
cve
cve
CVE-2023-25472
2023-05-23 13:15:09
prion
prion
Cross site request forgery (csrf)
2023-05-23 13:15:00
cvelist
cvelist
osv
osv
CVE-2023-25472
2023-05-23 13:15:09