Lucene search

K
wpvulndbWpvulndbWPVDB-ID:5D7199E4-4128-4405-98F8-C2CBC4C2E382
HistoryOct 10, 2023 - 12:00 a.m.

WP-CopyProtect <= 3.1.0 - Settings Update via CSRF

2023-10-1000:00:00
wpscan.com
13
plugin
csrf
vulnerability
settings
attack
admin

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

Related for WPVDB-ID:5D7199E4-4128-4405-98F8-C2CBC4C2E382