Lucene search
WpvulndbWPVDB-ID:26EA0F8E-ACCE-40D1-917E-5162F78CCC8EHistoryOct 10, 2023 - 12:00 a.m.
WP Captcha <= 2.0.0 - Settings Update via CSRF
2023-10-1000:00:00
wpscan.com
4
plugin
csrf
vulnerability
settings
update
attack
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Related
cve
cve
CVE-2023-44236
2023-10-09 10:15:22
prion
prion
Cross site request forgery (csrf)
2023-10-09 10:15:00
nvd
nvd
CVE-2023-44236
2023-10-09 10:15:22
cvelist
cvelist
wordfence
wordfence
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.1%
Related for WPVDB-ID:26EA0F8E-ACCE-40D1-917E-5162F78CCC8E