Lucene search
PRIOn knowledge basePRION:CVE-2023-6390HistoryJan 29, 2024 - 3:15 p.m.
Cross site request forgery (csrf)
2024-01-2915:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site request forgery
wordpress users plugin
settings update
csrf attack
nvd
The WordPress Users WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_users | le | 1.4.0 |
Related
nvd
nvd
CVE-2023-6390
2024-01-29 15:15:09
cvelist
cvelist
CVE-2023-6390 WordPress Users <= 1.4 - Settings Update via CSRF
2024-01-29 14:44:29
wpexploit
wpexploit
WordPress Users <= 1.4 - Settings Update via CSRF
2024-01-03 00:00:00
cve
cve
CVE-2023-6390
2024-01-29 15:15:09
wpvulndb
wpvulndb
WordPress Users <= 1.4 - Settings Update via CSRF
2024-01-03 00:00:00
wordfence
wordfence