Lucene search

K
wpvulndbWpvulndbWPVDB-ID:5CCF1408-AD05-484A-9EC9-AFD8131ED46B
HistoryOct 12, 2023 - 12:00 a.m.

Perelink Pro <= 2.1.4 - Settings Update via CSRF

2023-10-1200:00:00
wpscan.com
7
perelink pro
csrf attack
settings update
security vulnerability
admin

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

24.0%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

24.0%

Related for WPVDB-ID:5CCF1408-AD05-484A-9EC9-AFD8131ED46B