Lucene search
DmitriiWPVDB-ID:B2C6FA7D-1B0F-444B-8CA5-8C1C06CEA1D9HistoryAug 07, 2023 - 12:00 a.m.
POEditor < 0.9.8 - Settings Reset via CSRF
2023-08-0700:00:00
Dmitrii
wpscan.com
3
poeditor
csrf
vulnerability
admin
settings
reset
api key
attack
Description The plugin does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin’s settings and update its API key via CSRF attacks.
PoC
Related
cvelist
cvelist
CVE-2023-4209 POEditor < 0.9.8 - Settings Reset via CSRF
2023-08-30 14:22:05
prion
prion
Cross site request forgery (csrf)
2023-08-30 15:15:00
nvd
nvd
CVE-2023-4209
2023-08-30 15:15:10
wpexploit
wpexploit
POEditor < 0.9.8 - Settings Reset via CSRF
2023-08-07 00:00:00
cve
cve
CVE-2023-4209
2023-08-30 15:15:10
wordfence
wordfence
AI Score
7
Confidence
High
EPSS
0.001
Percentile
30.2%
Related for WPVDB-ID:B2C6FA7D-1B0F-444B-8CA5-8C1C06CEA1D9