Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitKrzysztof ZającWPEX-ID:D9F28255-0026-4C42-9E67-D17B618C2285
HistoryFeb 07, 2022 - 12:00 a.m.

WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF

2022-02-0700:00:00
Krzysztof Zając
93

0.001 Low

EPSS

Percentile

26.5%

JSON

The plugin does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack

https://example.com/wp-admin/admin.php?page=real-cookie-banner-component&rcb-reset-all=1

Related

nvd 1
patchstack 1
prion 1
openvas 1
wpvulndb 1
cvelist 1
cve 1
nvd
nvd
CVE-2022-0445
2022-03-07 09:15:09
patchstack
patchstack
WordPress Real Cookie Banner plugin <= 2.14.1 - Settings Reset via Cross-Site Request Forgery (CSRF) vulnerability
2022-02-07 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-03-07 09:15:00
openvas
openvas
WordPress Real Cookie Banner Plugin < 2.14.2 CSRF Vulnerability
2023-01-25 00:00:00
wpvulndb
wpvulndb
WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF
2022-02-07 00:00:00
cvelist
cvelist
CVE-2022-0445 WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF
2022-03-07 08:16:46
cve
cve
CVE-2022-0445
2022-03-07 09:15:09

0.001 Low

EPSS

Percentile

26.5%

JSON
Related for WPEX-ID:D9F28255-0026-4C42-9E67-D17B618C2285
nvd1patchstack1prion1openvas1wpvulndb1cvelist1cve1