Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2271
HistoryAug 16, 2023 - 12:15 p.m.

Cross site request forgery (csrf)

2023-08-1612:15:00
PRIOn knowledge base
www.prio-n.com
6
cross site request forgery
csrf
tiempo.com
wordpress
plugin
shortcode
vulnerability
attack

4.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when deleting its shortcode, which could allow attackers to make logged in admins delete arbitrary shortcode via a CSRF attack

CPENameOperatorVersion
tiempole0.1.2

4.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Related for PRION:CVE-2023-2271