Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3850
HistoryNov 28, 2022 - 2:15 p.m.

Cross site request forgery (csrf)

2022-11-2814:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
csrf attack
find and replace all
plugin vulnerability
database tables

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack

CPENameOperatorVersion
find_and_replace_allle1.3

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%