Lucene search
Dave Jong (Patchstack)PATCHSTACK:15F5F7611E322ABAFEA10582D0218D9CHistoryOct 20, 2022 - 12:00 a.m.
WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability
2022-10-2000:00:00
Dave Jong (Patchstack)
patchstack.com
9
wordpress
avada theme
csrf
vulnerability
update
patchstack
arbitrary plugin installation
0.001 Low
EPSS
Percentile
42.0%
Cross-Site Request Forgery (CSRF) vulnerability Leading to Arbitrary Plugin Installation/Activation discovered by Dave Jong (Patchstack) in WordPress Avada theme (versions <= 7.8.1).
Solution
Update the WordPress Avada theme to the latest available version (at least 7.8.2).
Related
prion
prion
Cross site request forgery (csrf)
2022-10-27 17:15:00
wpvulndb
wpvulndb
Avada < 7.8.2 - Arbitrary Plugin Instalation/Activation via CRSF
2022-10-20 00:00:00
cve
cve
CVE-2022-41996
2022-10-27 17:15:10
cvelist
cvelist
nvd
nvd
CVE-2022-41996
2022-10-27 17:15:10