Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4209
HistoryAug 30, 2023 - 3:15 p.m.

Cross site request forgery (csrf)

2023-08-3015:15:00
PRIOn knowledge base
www.prio-n.com
3
poeditor
wordpress
csrf
vulnerability
nvd
plugin
admins
settings
api key
attacks

4.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin’s settings and update its API key via CSRF attacks.

CPENameOperatorVersion
poeditorlt0.9.8

4.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2023-4209