Lucene search
Daniel RufWPVDB-ID:5FA5838E-4843-4D9C-9884-E3EBBF56FC6AHistoryMay 31, 2022 - 12:00 a.m.
Tiny Contact Form <= 0.7 - Arbitrary Settings Update via CSRF
2022-05-3100:00:00
Daniel Ruf
wpscan.com
11
csrf attack
plugin vulnerability
arbitrary settings update
EPSS
0.001
Percentile
25.9%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
PoC
‘’>
Related
cvelist
cvelist
CVE-2022-1846 Tiny Contact Form <= 0.7 - Arbitrary Settings Update via CSRF
2022-06-27 08:58:03
cnvd
cnvd
WordPress Tiny Contact Form plugin跨站请求伪造漏洞
2022-06-30 00:00:00
wpexploit
wpexploit
Tiny Contact Form <= 0.7 - Arbitrary Settings Update via CSRF
2022-05-31 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-06-27 09:15:00
nvd
nvd
CVE-2022-1846
2022-06-27 09:15:09
cve
cve
CVE-2022-1846
2022-06-27 09:15:09