Lucene search
WpvulndbWPVDB-ID:4DDCC491-8EB2-418D-9869-20B9E9E83D5FHistoryFeb 07, 2023 - 12:00 a.m.
OWM Weather < 5.6.12 - Post Duplication via CSRF
2023-02-0700:00:00
wpscan.com
6
owm weather
plugin
csrf
vulnerability
duplication
posts
drafts
logged in admin
attack
post table
software
EPSS
0.001
Percentile
21.4%
The plugin does not have CSRF check when duplicating posts (which will be duplicated as drafts), which could allow attackers to make logged in admin perform such action via a CSRF attack and fill up the post table
Related
cvelist
cvelist
nvd
nvd
CVE-2022-47179
2023-02-28 15:15:10
cve
cve
CVE-2022-47179
2023-02-28 15:15:10
prion
prion
Cross site request forgery (csrf)
2023-02-28 15:15:00