Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:95595766-D535-43CC-9655-6B7D3018C5E1
HistoryApr 04, 2023 - 12:00 a.m.

Comment Reply Notification <= 1.4 - Cross-Site Request Forgery

2023-04-0400:00:00
wpscan.com
4
cross-site request forgery
software
nonce validation

EPSS

0.001

Percentile

28.1%

JSON

The plugin does not properly validate requests use nonces, leading to a Cross-Site Request Forgery (CSRF) vulnerability.

Related

cvelist 1
prion 1
nvd 1
cve 1
wordfence 1
cvelist
cvelist
CVE-2023-25051 WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
2023-07-11 07:19:05
prion
prion
Cross site request forgery (csrf)
2023-07-11 08:15:00
nvd
nvd
CVE-2023-25051
2023-07-11 08:15:10
cve
cve
CVE-2023-25051
2023-07-11 08:15:10
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (Apr 3, 2023 to Apr 9, 2023)
2023-04-13 12:03:39

EPSS

0.001

Percentile

28.1%

JSON
Related for WPVDB-ID:95595766-D535-43CC-9655-6B7D3018C5E1
cvelist1prion1nvd1cve1wordfence1