Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-16919
HistoryFeb 16, 2022 - 12:00 a.m.

WordPress Remove Footer Credit plugin跨站请求伪造漏洞

2022-02-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

21.3%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the WordPress Remove Footer Credit plugin, which stems from the fact that the Remove Footer Credit plugin does not perform CSRF checks when saving its settings and can be used by attackers to forge malicious requests to obtain sensitive information.

0.001 Low

EPSS

Percentile

21.3%