Lucene search
WpvulndbWPVDB-ID:56174FFB-3D34-48F4-ACB1-A7AA799DB1E1HistorySep 02, 2022 - 12:00 a.m.
Pop-up < 1.1.6 - Arbitrary Settings Update via CSRF
2022-09-0200:00:00
wpscan.com
13
pop-up
csrf
vulnerability
plugin
settings
attack
EPSS
0.001
Percentile
40.8%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Related
cvelist
cvelist
prion
prion
Privilege escalation
2022-09-09 15:15:00
patchstack
patchstack
WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability
2022-09-02 00:00:00
cve
cve
CVE-2022-38070
2022-09-09 15:15:14
nvd
nvd
CVE-2022-38070
2022-09-09 15:15:14