Lucene search
WpvulndbWPVDB-ID:5D69EDB9-8B18-4453-8028-EFAA9671762FHistoryJun 30, 2022 - 12:00 a.m.
Gallery for Social Photo < 1.0.0.29 - Arbitrary Post Duplication via CSRF
2022-06-3000:00:00
wpscan.com
9
0.001 Low
EPSS
Percentile
38.1%
The plugin does not have CSRF check in place when duplicating a post or page, which could allow attackers to make a logged in a admin duplicate them via a CSRF attack
PoC
https://example.com/wp-admin/admin-ajax.php?action=gifeed_duplicate_feed&post;=12
| CPE | Name | Operator | Version |
|---|---|---|---|
| feed-instagram-lite | lt | 1.0.0.29 |
Related
patchstack
patchstack
cve
cve
CVE-2022-2224
2022-07-18 17:15:09
nvd
nvd
CVE-2022-2224
2022-07-18 17:15:09
prion
prion
Cross site request forgery (csrf)
2022-07-18 17:15:00
cvelist
cvelist
CVE-2022-2224
2022-07-18 16:18:58
wpexploit
wpexploit
Gallery for Social Photo < 1.0.0.29 - Arbitrary Post Duplication via CSRF
2022-06-30 00:00:00