Lucene search
PRIOn knowledge basePRION:CVE-2022-0914HistoryApr 11, 2022 - 3:15 p.m.
Cross site request forgery (csrf)
2022-04-1115:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
42.8%
The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbitrary CSV file, which the attacker can then download and retrieve the list of titles for example
| CPE | Name | Operator | Version |
|---|---|---|---|
| export_all_urls | lt | 4.3 |
Related
patchstack
patchstack
nvd
nvd
CVE-2022-0914
2022-04-11 15:15:08
cve
cve
CVE-2022-0914
2022-04-11 15:15:08
cvelist
cvelist
openvas
openvas
WordPress Export All URLs Plugin < 4.2 Multiple Vulnerabilities
2023-09-14 00:00:00