Lucene search
WpvulndbWPVDB-ID:855358F5-E464-4955-99E4-279F6AA0316FHistoryOct 20, 2023 - 12:00 a.m.
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
2023-10-2000:00:00
wpscan.com
5
wordpress
csrf
security
plugin
attackers
logged in users
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Related
cvelist
cvelist
CVE-2023-4938
2023-10-18 07:31:17
nvd
nvd
CVE-2023-4938
2023-10-18 08:15:08
cve
cve
CVE-2023-4938
2023-10-18 08:15:08
prion
prion
Authorization
2023-10-18 08:15:00
wordfence
wordfence
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
23.9%
Related for WPVDB-ID:855358F5-E464-4955-99E4-279F6AA0316F