Widgets for Google Reviews < 10.9.1 - Arbitrary Settings Update via CSRF

2023-10-2000:00:00

wpscan.com

plugin

csrf checks

attackers

logged in users

unwanted actions

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

20.5%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.