Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57626
HistoryJun 30, 2022 - 12:00 a.m.

WordPress WP Post Styling plugin跨站请求伪造漏洞

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
wp post styling
cross-site request forgery
security vulnerability
csrf checks
administrator
attack mitigation

EPSS

0.001

Percentile

25.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Post Styling plugin version prior to 1.3.1 is vulnerable to cross-site request forgery, which stems from the absence of CSRF checks in various operations. An attacker can use this vulnerability to make the logged-in administrator delete the plugin’s data, update settings, add new entries, etc. through CSRF attacks.

EPSS

0.001

Percentile

25.9%