Lucene search

K
wpvulndbDaniel RufWPVDB-ID:88014DA6-6179-4527-8F67-FBB610804D93
HistoryMay 26, 2022 - 12:00 a.m.

Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF

2022-05-2600:00:00
Daniel Ruf
wpscan.com
7

0.001 Low

EPSS

Percentile

26.5%

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

PoC

Some link: https://google.com

CPENameOperatorVersion
seamless-donationslt5.1.9

0.001 Low

EPSS

Percentile

26.5%

Related for WPVDB-ID:88014DA6-6179-4527-8F67-FBB610804D93