Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19796
HistoryMar 09, 2022 - 12:00 a.m.

WordPress Pricing Tables Plugin Cross-Site Request Forgery Vulnerability

2022-03-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
24
wordpress
pricing tables
cross-site request forgery
vulnerability
php
mysql
csrf attacks
administrator

EPSS

0.001

Percentile

26.3%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Pricing Tables Plugin version 3.1.3 before the cross-site request forgery vulnerability, the vulnerability stems from the failure to verify CSRF when deleting posts, an attacker can use the vulnerability through CSRF attacks so that the login administrator to delete arbitrary posts from the blog.

EPSS

0.001

Percentile

26.3%