Prevent Landscape Rotation < 2.1 - Settings Update via CSRF

2023-12-0800:00:00

wpscan.com

plugin

csrf

attackers

settings update

security

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CPENameOperatorVersion
eq2.1

CPE	Name	Operator	Version
		eq	2.1

References

patchstack.com/database/vulnerability/prevent-landscape-rotation/wordpress-prevent-landscape-rotation-plugin-2-0-cross-site-request-forgery-csrf-vulnerability