Lucene search
NGO VAN TUWPVDB-ID:0357ECC7-56F5-4843-A928-BF2D3CE75596HistoryJun 05, 2023 - 12:00 a.m.
WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF
2023-06-0500:00:00
NGO VAN TU
wpscan.com
6
inventory manager
csrf
attack
deletion
wordpress
admins
0.001 Low
EPSS
Percentile
30.7%
The plugin does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack
PoC
Send a payload to logged-in admins with a request to http://127.0.0.1/wordpress/wp-admin/admin.php?page=wpim_manage_inventory_items&action;=delete&delete;_id=2
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-inventory-manager | lt | 2.1.0.14 |
Related
wpexploit
wpexploit
WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF
2023-06-05 00:00:00
nvd
nvd
CVE-2023-2842
2023-06-27 14:15:11
cve
cve
CVE-2023-2842
2023-06-27 14:15:11
prion
prion
Cross site request forgery (csrf)
2023-06-27 14:15:00
cvelist
cvelist
wordfence
wordfence