Lucene search
PRIOn knowledge basePRION:CVE-2023-2627HistoryJun 27, 2023 - 2:15 p.m.
Cross site request forgery (csrf)
2023-06-2714:15:00
PRIOn knowledge base
www.prio-n.com
1
kivicare
wordpress
csrf
ajax
authenticated users
unauthorized actions
vulnerabilities
The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, allowing any authenticated users, such as subscriber to call them. Attacks include but are not limited to: Add arbitrary Clinic Admin/Doctors/etc and update plugin’s settings
Related
wpvulndb
wpvulndb
KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls
2023-06-05 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-2627
2023-06-27 14:15:11
wpexploit
wpexploit
KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls
2023-06-05 00:00:00
cve
cve
CVE-2023-2627
2023-06-27 14:15:11
wordfence
wordfence