Lucene search

K
wpvulndbWpvulndbWPVDB-ID:4387E33D-D6D4-4137-9EE6-C93E91D0F1BB
HistoryJul 05, 2023 - 12:00 a.m.

ShopLentor < 2.6.3 - Settings Update via CSRF

2023-07-0500:00:00
wpscan.com
12
shoplentor
csrf
vulnerability
settings
update
security

EPSS

0.001

Percentile

28.3%

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

EPSS

0.001

Percentile

28.3%

Related for WPVDB-ID:4387E33D-D6D4-4137-9EE6-C93E91D0F1BB