Lucene search
WpvulndbWPVDB-ID:31677623-DE4F-4F5E-9360-D8D066760EBCHistoryNov 14, 2022 - 12:00 a.m.
WP Affiliate Platform < 6.4.0 - Affiliate Record Deletion via CSRF
2022-11-1400:00:00
wpscan.com
5
wordpress
affiliate
platform
record deletion
csrf
attackers
admins
EPSS
0.001
Percentile
23.6%
The plugin does not have CSRF checks when deleting affiliate records, which could allow attackers to make logged in admins to delete arbitrary record via a CSRF attack
Related
cvelist
cvelist
CVE-2022-3898
2022-11-29 20:42:19
cnvd
cnvd
cve
cve
CVE-2022-3898
2022-11-29 21:15:11
prion
prion
Cross site request forgery (csrf)
2022-11-29 21:15:00
nvd
nvd
CVE-2022-3898
2022-11-29 21:15:11