WOLF < 1.0.7.2 - Cross-Site Request Forgery (CSRF)

2023-10-2400:00:00

wpscan.com

wolf plugin

csrf

vulnerability

security

software

AI Score

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-plugin-1-0-7-1-cross-site-request-forgery-csrf-vulnerability

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/bulk-editor/wolf-1071-cross-site-request-forgery