Lucene search
WpvulndbWPVDB-ID:17899D4D-54C6-4A49-9613-24AA343AB7F8HistoryOct 23, 2023 - 12:00 a.m.
Userback < 1.0.14 - Arbitrary Settings Update via CSRF
2023-10-2300:00:00
wpscan.com
3
plugin
csrf
attackers
settings manipulation
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Related
cve
cve
CVE-2023-46089
2023-10-22 22:15:08
cvelist
cvelist
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-46089
2023-10-22 22:15:08
prion
prion
Cross site request forgery (csrf)
2023-10-22 22:15:00
wordfence
wordfence
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for WPVDB-ID:17899D4D-54C6-4A49-9613-24AA343AB7F8