Lucene search
WpvulndbWPVDB-ID:5301F365-C283-434F-8521-B8D61A57C84DHistoryNov 21, 2023 - 12:00 a.m.
Code Snippets < 3.6.0 - Arbitrary settings change via CSRF
2023-11-2100:00:00
wpscan.com
5
plugin
csrf
settings
attackers
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 3.6.0 |
Related
cve
cve
CVE-2023-47666
2023-11-18 21:15:09
nvd
nvd
CVE-2023-47666
2023-11-18 21:15:09
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-11-18 21:15:00
wordfence
wordfence
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
24.1%
Related for WPVDB-ID:5301F365-C283-434F-8521-B8D61A57C84D