Lucene search
PRIOn knowledge basePRION:CVE-2023-1624HistoryApr 24, 2023 - 7:15 p.m.
Cross site request forgery (csrf)
2023-04-2419:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site request forgery
wpcode
arbitrary file deletion
security plugin
0.001 Low
EPSS
Percentile
25.2%
The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders
Related
openvas
openvas
nvd
nvd
CVE-2023-1624
2023-04-24 19:15:09
wpexploit
wpexploit
WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
2023-04-03 00:00:00
wpvulndb
wpvulndb
WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
2023-04-03 00:00:00
cvelist
cvelist
CVE-2023-1624 WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
2023-04-24 18:30:56
cve
cve
CVE-2023-1624
2023-04-24 19:15:09
wordfence
wordfence