Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D77529DD-1704-4ADA-B89D-174F9C50CC15
HistoryOct 17, 2023 - 12:00 a.m.

Automated Editor <= 1.3 - Arbitrary Settings Update via CSRF

2023-10-1700:00:00
wpscan.com
2
automated editor
csrf
plugin
attackers
logged-in users

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:D77529DD-1704-4ADA-B89D-174F9C50CC15