Lucene search
WpvulndbWPVDB-ID:986AE113-1228-4573-A0D2-746D5844A232HistoryMay 21, 2023 - 12:00 a.m.
Smart App Banner < 1.1.2 - Cross-Site Request Forgery (CSRF)
2023-05-2100:00:00
wpscan.com
5
smart app banner
csrf
cross-site request forgery
unauthenticated attacker
crafted request
software
EPSS
0.001
Percentile
27.7%
The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request.
References
patchstack.com/database/vulnerability/smart-app-banner/wordpress-smart-app-banner-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability
www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/smart-app-banner/smart-app-banner-112-cross-site-request-forgery-via-wsl-smart-app-banner-options
Related
cvelist
cvelist
nvd
nvd
CVE-2023-33315
2023-05-28 18:15:09
cve
cve
CVE-2023-33315
2023-05-28 18:15:09
prion
prion
Cross site request forgery (csrf)
2023-05-28 18:15:00