Lucene search

K
wpvulndbWpvulndbWPVDB-ID:225C2BD7-2EDF-4659-807D-833385DCE390
HistoryOct 11, 2023 - 12:00 a.m.

MakeStories (for Google Web Stories) <= 2.8.2 - Settings Update via CSRF

2023-10-1100:00:00
wpscan.com
3
makestories
csrf
vulnerability
settings
update
software

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:225C2BD7-2EDF-4659-807D-833385DCE390