CVE-2023-1086

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

CVE-2023-1086

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

CVE-2023-1086

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

CVE-2023-1086

CVE-2023-1086 affects the Preview Link Generator WordPress plugin, up to version 1.0.3. The root cause is a lack of CSRF validation when activating plugins, allowing an unauthenticated attacker to trigger plugin activations via CSRF if a user is logged in. The documented impact is arbitrary plugi...

CVE-2023-1086 Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

WordPress plugin Preview Link Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

PT-2023-16741 · WordPress · Preview Link Generator

Name of the Vulnerable Software and Affected Versions: Preview Link Generator WordPress plugin versions prior to 1.0.4 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog...

WordPress Preview Link Generator Plugin < 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Preview Link Generator Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-1086 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a96dff3de79 Credits WPScan Required...