Lucene search

K
wpvulndbWpvulndbWPVDB-ID:2077AEA9-0721-43E1-B0E1-0CB06F13554C
HistoryOct 12, 2023 - 12:00 a.m.

Thumbnail Slider With Lightbox < 1.0.1 - Image Lightboxes via CSRF

2023-10-1200:00:00
wpscan.com
1
plugin
csrf check
image lightboxes
logged in admins
attack

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

Description The plugin does not have CSRF check when deleting image lightboxes, which could allow attackers to make logged in admins perform such action via a CSRF attack

CPENameOperatorVersion
eq1.0.1

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

Related for WPVDB-ID:2077AEA9-0721-43E1-B0E1-0CB06F13554C