Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D0AE7FB2-49B2-47B9-92E1-BF6357AAAD0B
HistorySep 23, 2022 - 12:00 a.m.

Seriously Simple Podcasting < 2.16.1 - Arbitrary Settings Update via CSRF

2022-09-2300:00:00
wpscan.com
11
plugin
csrf
settings
attack
admin

EPSS

0.001

Percentile

20.8%

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

EPSS

0.001

Percentile

20.8%

Related for WPVDB-ID:D0AE7FB2-49B2-47B9-92E1-BF6357AAAD0B