Urvanov Syntax Highlighter < 2.8.34 - Highlighting Blocks Mgt via CSRF

2023-10-1300:00:00

wpscan.com

plugin

csrf

highlighting blocks

management

logged in admins

attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks when managing highlighting blocks, which could allow attackers to make logged in admins update, create, duplicate and delete them via CSRF attacks