Lucene search
Daniel RufWPVDB-ID:54A00416-C7E3-44F3-8DD2-ED9E748055E6HistoryJan 02, 2024 - 12:00 a.m.
Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF
2024-01-0200:00:00
Daniel Ruf
wpscan.com
6
wordpress
plugin
csrf
vulnerability
settings update
stored xss
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
PoC
References
Related
prion
prion
Cross site request forgery (csrf)
2024-01-29 15:15:00
nvd
nvd
CVE-2023-6946
2024-01-29 15:15:09
cvelist
cvelist
cve
cve
CVE-2023-6946
2024-01-29 15:15:09
wpexploit
wpexploit
Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF
2024-01-02 00:00:00
wordfence
wordfence
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.7%
Related for WPVDB-ID:54A00416-C7E3-44F3-8DD2-ED9E748055E6