CVE-2023-4277

The Realia plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.0. This is due to missing nonce validation on the 'processchangeprofileform' function. This makes it possible for unauthenticated attackers to change user email via a forged request...

CVE-2023-4277 Realia <= 1.4.0 - Cross-Site Request Forgery to User Email Change

The Realia plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.0. This is due to missing nonce validation on the 'processchangeprofileform' function. This makes it possible for unauthenticated attackers to change user email via a forged request...

CVE-2023-4277

CVE-2023-4277: Realia WordPress plugin

WordPress Realia Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Realia Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4277 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 838637c6ad0b Credits Lana Codes Required privilege...