Lucene search

CVE-2023-1086

🗓️ 27 Mar 2023 16:09:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

The Preview Link Generator WordPress plugin before 1.0.4 is vulnerable to CSRF attack

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2023-1086 Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF	27 Mar 202315:37	–	cvelist
Vulnrichment	CVE-2023-1086 Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF	27 Mar 202315:37	–	vulnrichment
WPVulnDB	Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF	28 Feb 202300:00	–	wpvulndb
Prion	Cross site request forgery (csrf)	27 Mar 202316:15	–	prion
Patchstack	WordPress Preview Link Generator Plugin < 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)	2 Mar 202300:00	–	patchstack
wpexploit	Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF	28 Feb 202300:00	–	wpexploit
NVD	CVE-2023-1086	27 Mar 202316:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (Feb 27, 2023 to Mar 5, 2023)	9 Mar 202314:32	–	wordfence

Nvd

Vulners

Node

hasthemes preview_link_generatorRange<1.0.4wordpress

[
  {
    "vendor": "Unknown",
    "product": "Preview Link Generator",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.0.4"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/e2bda716-76dc-4a26-b26a-7a2a764757b0

Parameter	Position	Path	Description	CWE
action	request body	/wp-admin/admin-ajax.php	CSRF vulnerability allowing arbitrary plugin activation by logged in admins.	CWE-352
location	request body	/wp-admin/admin-ajax.php	CSRF vulnerability allowing arbitrary plugin activation by logged in admins.	CWE-352

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Mar 2023 16:15Current

4.5Medium risk

Vulners AI Score4.5

CVSS34.3

EPSS0.01361

SSVC