Lucene search
WpvulndbWPVDB-ID:D7E36290-8959-4DCD-9DD1-09F23529E2D6HistoryMar 14, 2023 - 12:00 a.m.
WP Basic Elements <= 5.2.15 - Cross-Site Request Forgery (CSRF)
2023-03-1400:00:00
wpscan.com
4
plugin
csrf
ajax
unauthenticated attacker
admin
crafted request
EPSS
0.001
Percentile
27.6%
The plugin does not protect its wpbe_save_settings ajax actions against CSRF attacks, allowing an unauthenticated attacker to update the plugin settings by tricking a logged in admin to submit a crafted request.
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-05-25 09:15:00
cve
cve
CVE-2022-47139
2023-05-25 09:15:11
nvd
nvd
CVE-2022-47139
2023-05-25 09:15:11
wordfence
wordfence