CVE-2020-36756

🗓️ 12 Jul 2023 07:15:09Reported by [email protected]Type

The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.8 due to missing or incorrect nonce validation on the create_csv_file() function

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-36756	12 Jul 202312:41	–	circl
CNNVD	WordPress Plugin 10WebAnalytics 跨站请求伪造漏洞	12 Jul 202300:00	–	cnnvd
CVE	CVE-2020-36756	12 Jul 202306:52	–	cve
Cvelist	CVE-2020-36756 10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass	12 Jul 202306:52	–	cvelist
EUVD	EUVD-2020-24197	7 Oct 202500:30	–	euvd
OSV	CVE-2020-36756	12 Jul 202307:15	–	osv
Prion	Cross site request forgery (csrf)	12 Jul 202307:15	–	prion
Positive Technologies	PT-2023-11896	12 Jul 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2020-36756: Cross-Site Request Forgery (CSRF)	12 Jul 202300:00	–	rapid7
RedhatCVE	CVE-2020-36756	22 May 202515:34	–	redhatcve

NVD

Node

10web 10webanalyticsRange≤1.2.8wordpress

Source	Link
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
plugins	www.plugins.trac.wordpress.org/changeset
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/db29f17d-1d2b-4f78-a78d-1579e2a5d975

17 Jun 2026 03:16Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.14.3

EPSS0.00393

SSVC

CWE-352