Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2087
HistoryJun 09, 2023 - 6:16 a.m.

Cross site request forgery (csrf)

2023-06-0906:16:00
PRIOn knowledge base
www.prio-n.com
7
wordpress
essential blocks plugin
csrf

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CPENameOperatorVersion
essential_blocksle4.0.6

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

Related for PRION:CVE-2023-2087