Lucene search

K
wpvulndbWpvulndbWPVDB-ID:611B80B6-1F7D-4E14-9730-BAEC0E30F94A
HistoryOct 17, 2023 - 12:00 a.m.

Lazy Load for Videos < 2.18.3 - Arbitrary Settings Update via CSRF

2023-10-1700:00:00
wpscan.com
7
lazy load
videos
csrf
vulnerability
settings
update
security
software

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CPENameOperatorVersion
eq2.18.3

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:611B80B6-1F7D-4E14-9730-BAEC0E30F94A