Lucene search

K
wpvulndbWpvulndbWPVDB-ID:197464AD-BDEF-4370-92F8-2EFA461B8143
HistoryOct 12, 2023 - 12:00 a.m.

Sign-up Sheets < 2.2.9 - Settings Update/Reset via CSRF

2023-10-1200:00:00
wpscan.com
1
plugin
csrf
settings update
attackers
admin
exploit

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Description The plugin does not have CSRF check in place when updating and reseting its settings, which could allow attackers to make a logged in admin change and reset them via a CSRF attack

CPENameOperatorVersion
eq2.2.9

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:197464AD-BDEF-4370-92F8-2EFA461B8143