Lucene search

K
wpvulndbWpvulndbWPVDB-ID:621664FE-790F-486A-96E5-5F7D8BC13393
HistoryOct 17, 2023 - 12:00 a.m.

Hitsteps Web Analytics < 5.87 - Arbitrary Settings Update via CSRF

2023-10-1700:00:00
wpscan.com
6
security
csrf
vulnerability
web analytics

AI Score

7

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

AI Score

7

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:621664FE-790F-486A-96E5-5F7D8BC13393