2 matches found
WordPress Plugin BEAR Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
8.8CVSS6.7AI score0.00364EPSS
SaveExploits0References4
PT-2023-31112
Name of the Vulnerable Software and Affected Versions The BEAR for WordPress versions up to, and including, 1.1.3.3 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe save options function. This allows unauthenticated attackers...
8.8CVSS5.7AI score0.00364EPSS
SaveExploits0References7
20