Lucene search
WpvulndbWPVDB-ID:7EEEB644-7902-410E-955D-FCBB8D0FBD37HistoryJan 04, 2023 - 12:00 a.m.
JetWidgets for Elementor < 1.0.13 - Settings Update via CSRF
2023-01-0400:00:00
wpscan.com
8
jetwidgets
elementor
csrf
vulnerability
security
0.001 Low
EPSS
Percentile
29.4%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetwidgets-for-elementor | lt | 1.0.14 |
Related
cvelist
cvelist
CVE-2023-0086
2023-01-05 16:21:28
prion
prion
Cross site scripting
2023-01-05 17:15:00
cve
cve
CVE-2023-0086
2023-01-05 17:15:09
nvd
nvd
CVE-2023-0086
2023-01-05 17:15:09