Lucene search

K
wpvulndbWpvulndbWPVDB-ID:29D132FB-71D6-4291-A2E9-641DA6BF2C3D
HistorySep 28, 2021 - 12:00 a.m.

OG Tags < 2.0.2 - Plugin's Settings Update via CSRF

2021-09-2800:00:00
wpscan.com
14
og tags
csrf
vulnerability
plugin
settings
attackers

EPSS

0.001

Percentile

48.6%

The plugin is lacking a CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

EPSS

0.001

Percentile

48.6%

Related for WPVDB-ID:29D132FB-71D6-4291-A2E9-641DA6BF2C3D