Lucene search
PRIOn knowledge basePRION:CVE-2023-4824HistoryNov 20, 2023 - 7:15 p.m.
Cross site request forgery (csrf)
2023-11-2019:15:00
PRIOn knowledge base
www.prio-n.com
3
woohoo magazine
csrf attack
settings manipulation
admin access
The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| woohoo_newspaper_magazine_theme | le | 1.4.3 |
Related
cvelist
cvelist
nvd
nvd
CVE-2023-4824
2023-11-20 19:15:09
wpexploit
wpexploit
WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF
2023-10-27 00:00:00
cve
cve
CVE-2023-4824
2023-11-20 19:15:09
wpvulndb
wpvulndb
WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF
2023-10-27 00:00:00