Lucene search
Daniel RufPATCHSTACK:33694F971770F3E0F87B95CC34B01CCFHistoryJun 01, 2022 - 12:00 a.m.
WordPress New User Approve plugin <= 2.3 - Arbitrary Settings Update & Invitation Code Creation via CSRF vulnerability
2022-06-0100:00:00
Daniel Ruf
patchstack.com
7
0.001 Low
EPSS
Percentile
26.0%
Arbitrary Settings Update & Invitation Code Creation via CSRF vulnerability discovered by Daniel Ruf in WordPress New User Approve plugin (versions <= 2.3).
Solution
Update the WordPress New User Approve plugin to the latest available version (at least 2.4).
| CPE | Name | Operator | Version |
|---|---|---|---|
| new user approve | le | 2.3 |
Related
cve
cve
CVE-2022-1625
2022-06-27 09:15:09
nvd
nvd
CVE-2022-1625
2022-06-27 09:15:09
wpvulndb
wpvulndb
wpexploit
wpexploit
cnvd
cnvd
WordPress New User Approve plugin跨站请求伪造漏洞
2022-06-30 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-06-27 09:15:00
cvelist
cvelist