Lucene search
+L

4 matches found

NVD
NVD
added 2022/06/27 9:15 a.m.24 views

CVE-2022-1847

The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS0.00421EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/27 9:15 a.m.9 views

CVE-2022-1847

The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS5.8AI score0.00421EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/27 9:15 a.m.17 views

Cross site request forgery (csrf)

The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS4.5AI score0.00421EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/27 12:00 a.m.6 views

WordPress plugin Rotating Posts 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Rotating Posts plugin version 1.11 and earlier versions are vulnerable to cross-site request forger...

4.3CVSS5.4AI score0.00421EPSS
SaveExploits1References2
Rows per page
Query Builder