Lucene search
WpvulndbWPEX-ID:31512F33-C310-4B36-B665-19293097CC8BHistoryApr 25, 2023 - 12:00 a.m.
Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF
2023-04-2500:00:00
wpvulndb
38
tiempo.com
csrf
shortcode deletion
web application
security exploit
0.0005 Low
EPSS
Percentile
17.0%
The plugin does not have CSRF check when deleting its shortcode, which could allow attackers to make logged in admins delete arbitrary shortcode via a CSRF attack
Make a logged in admin open the URL below, this will make them delete the shortcode with ID 1
https://example.com/wp-admin/admin.php?page=tiempocom/app/admin.php&action=delete&shortcode=1Related
cve
cve
CVE-2023-2271
2023-08-16 12:15:12
prion
prion
Cross site request forgery (csrf)
2023-08-16 12:15:00
cvelist
cvelist
CVE-2023-2271 Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF
2023-08-16 11:03:22
wpvulndb
wpvulndb
Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF
2023-04-25 00:00:00
nvd
nvd
CVE-2023-2271
2023-08-16 12:15:12
wordfence
wordfence