Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:0826EE44-35EF-4D17-A72F-1B2958C687CD
HistoryApr 15, 2022 - 12:00 a.m.

MicroPayments < 1.9.6 - Arbitrary Settings Update via CSRF

2022-04-1500:00:00
wpscan.com
10

0.002 Low

EPSS

Percentile

56.5%

JSON

The plugin does not have CSRF in place when updating its settings, which could allow attacker to make a logged in admin perform such action via a CSRF attack

CPENameOperatorVersion
paid-membershiplt1.9.6

Related

cve 1
patchstack 1
cvelist 1
jvn 1
prion 1
nvd 1
cve
cve
CVE-2022-27629
2022-04-20 02:15:09
patchstack
patchstack
WordPress MicroPayments plugin <= 1.9.5 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
2022-04-15 00:00:00
cvelist
cvelist
CVE-2022-27629
2022-04-20 01:05:12
jvn
jvn
JVN#31606885: WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery
2022-04-15 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-04-20 02:15:00
nvd
nvd
CVE-2022-27629
2022-04-20 02:15:09

0.002 Low

EPSS

Percentile

56.5%

JSON
Related for WPVDB-ID:0826EE44-35EF-4D17-A72F-1B2958C687CD
cve1patchstack1cvelist1jvn1prion1nvd1