Lucene search

K
wpvulndbWpvulndbWPVDB-ID:6B6E896D-EEFB-4397-87A7-B92D90D5EA01
HistoryNov 13, 2023 - 12:00 a.m.

Profile Builder < 3.10.4 - Plugins Activation/Deactivation CSRF

2023-11-1300:00:00
wpscan.com
4
profile builder
csrf
activation
deactivation
plugins
security

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.3%

Description The plugin does not have CSRF checks when activating and deactivating plugins, which could allow attackers to make logged in users perform such actions via CSRF attacks

CPENameOperatorVersion
eq3.10.4

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:6B6E896D-EEFB-4397-87A7-B92D90D5EA01