Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56240
HistoryJul 13, 2022 - 12:00 a.m.

WordPress Opt-in plugin cross-site request forgery vulnerability

2022-07-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
wordpress
php
cross-site request forgery
plugin settings
spam
attackers

EPSS

0.001

Percentile

25.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. version 1.4.1 of the WordPress Opt-in plugin is vulnerable to cross-site request forgery, which can be exploited by attackers to change plugin settings and can be used to send spam.

EPSS

0.001

Percentile

25.9%