Lucene search

K
wpvulndbWpvulndbWPVDB-ID:30C0C060-19D8-4CE9-9C52-C48B12677136
HistoryFeb 02, 2024 - 12:00 a.m.

Don't Muck My Markup <= 1.8 - Cross-Site Request Forgery

2024-02-0200:00:00
wpscan.com
9
don't muck my markup
cross-site request forgery
wordpress plugin
vulnerability
unauthorized actions
nonce validation

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

9.0%

Description The Don’t Muck My Markup plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform unauthorized actions granted they can trick a site administrator into performing an action such as clicking on a link.

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:30C0C060-19D8-4CE9-9C52-C48B12677136