Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-4373
HistoryJun 07, 2023 - 2:15 a.m.

Cross site request forgery (csrf)

2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site request forgery
wordpress
vulnerability
unauthenticated attackers
site administrator

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CPENameOperatorVersion
better_searchle2.5.2

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

Related for PRION:CVE-2021-4373