Lucene search

K
wpvulndbWpvulndbWPVDB-ID:7D674CCB-EB28-4603-B135-B6CFC6A53DF2
HistoryOct 23, 2023 - 12:00 a.m.

Rocket Font <= 1.2.3 - Arbitrary Settings Update via CSRF

2023-10-2300:00:00
wpscan.com
6
rocket font plugin
csrf attack
arbitrary settings update

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.2%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.2%

Related for WPVDB-ID:7D674CCB-EB28-4603-B135-B6CFC6A53DF2