Lucene search

WordPress Wicked Folders Plugin <= 2.18.16 is vulnerable to Cross Site Request Forgery (CSRF)

🗓️ 08 Feb 2023 00:00:00Reported by Marco WotschkaType

WordPress Wicked Folders Plugin <= 2.18.16 CSRF vulnerabilit

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2023-0727	7 Feb 202323:15	–	cve
NVD	CVE-2023-0727	7 Feb 202323:15	–	nvd
Prion	Cross site request forgery (csrf)	7 Feb 202323:15	–	prion
Cvelist	CVE-2023-0727	7 Feb 202322:49	–	cvelist
WPVulnDB	Wicked Folders < 2.18.17 - Folder Structure Update via CSRF	7 Feb 202300:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence CE Weekly Vulnerability Report (Feb 6, 2023 to Feb 12, 2023)	16 Feb 202315:21	–	wordfence

Vulners

Node

wicked_plugins wicked_foldersRange≤2.18.16

Source	Link
wordpress	www.wordpress.org/plugins/wicked-folders/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wicked-folders/wicked-folders-21816-cross-site-request-forgery-via-ajax-delete-folder
plugins	www.plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Feb 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS35.4