Lucene search

K
wpvulndbDaniel RufWPVDB-ID:05A730BC-2D72-49E3-A608-E4390B19E97F
HistoryDec 18, 2023 - 12:00 a.m.

WP Blogs' Planetarium <= 1.0 - Settings Update via CSRF

2023-12-1800:00:00
Daniel Ruf
wpscan.com
5
wordpress
csrf
security vulnerability
plugin

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

PoC

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:05A730BC-2D72-49E3-A608-E4390B19E97F