CPT Shortcode Generator <= 1.0 - Arbitrary Settings Update via CSRF

2023-10-2700:00:00

wpscan.com

plugin

csrf

vulnerability

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/cpt-shortcode/wordpress-cpt-shortcode-generator-plugin-1-0-cross-site-request-forgery-csrf-vulnerability

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/cpt-shortcode/cpt-shortcode-generator-10-cross-site-request-forgery