Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4013
HistoryAug 30, 2023 - 3:15 p.m.

Cross site request forgery (csrf)

2023-08-3015:15:00
PRIOn knowledge base
www.prio-n.com
3
gdpr
cookie compliance
wordpress
csrf
attacks
license

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin’s license via CSRF attacks

CPENameOperatorVersion
gdpr_cookie_compliancelt4.12.5

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%