Lucene search

K
wpvulndbWpvulndbWPVDB-ID:29C8A1D1-37C2-4E07-A0F9-93AE74DC7121
HistoryJul 05, 2023 - 12:00 a.m.

WPLMS < 4.900 - Cross-Site Request Forgery

2023-07-0500:00:00
wpscan.com
6
wplms
cross-site request forgery
csrf
vulnerability
software

0.001 Low

EPSS

Percentile

24.3%

The plugin does not adequately verify requests use nonces, making it susceptible to Cross-Site Request Forgery (CSRF) attacks.

CPENameOperatorVersion
wplmslt4.900

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:29C8A1D1-37C2-4E07-A0F9-93AE74DC7121