Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3C78F035-1266-4786-A05F-3E8BF241EEFF
HistoryFeb 28, 2023 - 12:00 a.m.

Debug Assistant < 1.5 - Administrator Account Creation via CSRF

2023-02-2800:00:00
wpscan.com
3
debug assistant
csrf
administrator account
creation
software

0.001 Low

EPSS

Percentile

24.2%

The plugin does not have CSRF checks in the imlt_create_admin function, which could allow attackers to make logged in Admin users create new attacker-controlled Admin accounts via CSRF

CPENameOperatorVersion
debug-assistantlt1.5

0.001 Low

EPSS

Percentile

24.2%

Related for WPVDB-ID:3C78F035-1266-4786-A05F-3E8BF241EEFF