Strong Testimonials < 3.1.11 - Settings Update via CSRF

2024-01-0400:00:00

wpscan.com

plugin

csrf

security

settings

update

attack

admin

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks in various functions, which could allow attackers to make logged in admins perform unwanted actions via CSRF attacks, such as update the plugin’s settings

References

patchstack.com/database/vulnerability/strong-testimonials/wordpress-strong-testimonials-plugin-3-1-10-cross-site-request-forgery-csrf-vulnerability