Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57160
HistoryJun 22, 2022 - 12:00 a.m.

WordPress PDF24 Articles To PDF Cross-site Request Forgery Vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

26.4%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin PDF24 Articles To PDF 4.2.2 and earlier versions are vulnerable to cross-site request forgery, which stems from a failure to perform CSRF checks when updating its settings. An attacker could use this vulnerability to get the logged-in administrator to change the configuration via a CSRF attack.

CPENameOperatorVersion
WordPress PDF24 Articles To PDFle4.2.2

0.001 Low

EPSS

Percentile

26.4%