CVE-2024-13146

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...

CVE-2024-13146 Booknetic < 4.1.5 - Staff Creation via CSRF

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...

CVE-2024-13146

The CVE-2024-13146 entry concerns the WordPress Booknetic plugin (pre-4.1.5) lacking CSRF protection when creating Staff accounts, enabling a logged-in attacker to add arbitrary Staff members via CSRF. Affected: Booknetic WordPress plugin versions prior to 4.1.5. Root cause: missing CSRF check on...

Traidnt Discovery - [CSRF] Create Staff Account

No description provided by source. Exploit Title: Traidnt Discovery - CSRF Create Staff Account Date: 14-12-2009 Author: G0D-F4Th3r Software Link: http://discovery.traidnt.com/demo/ Version: 1.0 ====================================form================================================ html body...

Traidnt Discovery - Cross-Site Request Forgery (Create Staff Account)

Exploit Title: Traidnt Discovery - CSRF Create Staff Account Date: 14-12-2009 Author: G0D-F4Th3r Software Link: http://discovery.traidnt.com/demo/ Version: 1.0 ====================================form================================================ "/...