Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-46124
HistoryMay 27, 2023 - 12:00 a.m.

WordPress Store Locator for WordPress with Google Maps - LotsOfLocales plugin cross-site request forgery vulnerability

2023-05-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
store locator
cross-site request forgery
google maps
lotsoflocales
php
mysql

0.001 Low

EPSS

Percentile

27.6%

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. Cross-site request forgery vulnerability exists in WordPress Store Locator for WordPress with Google Maps - LotsOfLocales plugin version 3.98.7 and earlier versions. The vulnerability stems from a web application that does not adequately validate that a request is coming from a trusted user. An attacker can use this vulnerability to spoof malicious requests to trick victims into clicking on them to perform sensitive actions.

0.001 Low

EPSS

Percentile

27.6%

Related for CNVD-2023-46124